release.yml

name: Release
on: workflow_dispatch

permissions:
    contents: read # for checkout

jobs:
    release:
        name: Release
        runs-on: ubuntu-latest
        permissions:
            contents: write # to be able to publish a GitHub release
            issues: write # to be able to comment on released issues
            pull-requests: write # to be able to comment on released pull requests
            id-token: write # to enable use of OIDC for npm provenance
        steps:
            - name: Checkout
              uses: actions/checkout@v3
            - name: Setup Node.js
              uses: actions/setup-node@v3
              with: { node-version: latest }

            - name: Install dependencies
              run: npm clean-install
              env: { HUSKY: 0 }
            - name: Ensure CI passes
              run: npm run build:ci
            - name: Release update
              env: { GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" }
              run: npx semantic-release