automate publishing with provenance (#340) #84

	name: Release

	on:
	push:
	branches:
	- main

	jobs:
	release:
	name: Release
	runs-on: ubuntu-latest
	permissions:
	contents: write
	id-token: write
	issues: write
	repository-projects: write
	deployments: write
	packages: write
	pull-requests: write
	steps:
	- name: Checkout Repo
	uses: actions/checkout@v3
	with:
	# This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
	fetch-depth: 0

	- name: Setup Node.js 18.x
	uses: actions/setup-node@v3
	with:
	node-version: 18

	- name: Cache node modules
	uses: actions/cache@v3
	env:
	cache-name: cache-node-modules
	with:
	path: ~/.npm
	# This uses the same name as the build-action so we can share the caches.
	key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/package-lock.json') }}
	restore-keys: \|
	${{ runner.os }}-build-${{ env.cache-name }}-
	${{ runner.os }}-build-
	${{ runner.os }}-

	- name: Install Dependencies
	run: npm ci

	- name: Create Release Pull Request
	uses: changesets/[email protected]
	with:
	publish: npm run changeset publish
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

Provide feedback