npm-publish.yaml

name: Publish Package to npmjs

on:
  push:
    paths:
      - 'boundaries/ui-monorepo/packages/ui-kit/**'
    branches:
      - 'main'

permissions:
  contents: read

jobs:
  build:
    if: github.repository == 'shortlink-org/shortlink'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
        with:
          egress-policy: audit

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
        with:
          node-version: '20.x'
          registry-url: 'https://registry.npmjs.org'
      - run: pnpm install -g npm
        working-directory: ./boundaries/ui-monorepo/packages/ui-kit
      - run: pnpm ci
        working-directory: ./boundaries/ui-monorepo/packages/ui-kit
      - run: sed -i 's/@shortlink-org\/ui-kit/shortlink-ui-kit/g' package.json
        working-directory: ./boundaries/ui-monorepo/packages/ui-kit
      - run: pnpm publish --provenance --access public --registry https://registry.npmjs.org --scope=@batazor
        working-directory: ./boundaries/ui-monorepo/packages/ui-kit
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}