chore(github/publish-npm): enable provenance

Author: njfamirm

.github/workflows/build-lint-test.yaml

@@ -1,7 +1,4 @@
 # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
-
-name: Build & Lint & Test
-
 on:
   workflow_dispatch:
 
@@ -10,57 +7,13 @@ on:
   push:
     branches:
       - next
-      - main
 
 env:
-  NODE_VERSION: lts/*
+  NODE_VERSION: 22.11.0
 
 jobs:
-  build-lint-ts:
-    name: Build & Lint Typescript
-    runs-on: ubuntu-latest
-
-    permissions:
-      contents: read
-
-    steps:
-      - name: ⤵️ Checkout repository
-        uses: actions/checkout@v4
-
-      - name: 🏗 Setup nodejs
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-
-      - name: 🏗 Setup nodejs corepack
-        run: corepack enable
-
-      - name: 🏗 Get yarn config
-        id: yarn_config
-        run: echo "cache_folder=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
-
-      - name: 🏗 Cache Layer
-        uses: actions/cache@v4
-        with:
-          path: ${{ steps.yarn_config.outputs.cache_folder }}
-          key: ${{ runner.os }}-yarn-${{ hashFiles('yarn.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-yarn-
-
-      - name: 🏗 Install dependencies
-        run: yarn install --immutable
-
-      - name: 🚀 Build Typescript
-        run: yarn build
-        env:
-          WIREIT_LOGGER: metrics
-
-      - name: 🚀 Run ESLint
-        run: yarn lint
-        env:
-          WIREIT_LOGGER: metrics
-
-      - name: 🚀 Run Test
-        run: yarn test
-        env:
-          WIREIT_LOGGER: metrics
+  main:
+    uses: the-nexim/actions/.github/workflows/build-lint-test.yaml@next
+    with:
+      node-version: ${{ env.NODE_VERSION }}
+    secrets: inherit

.github/workflows/release.yaml

@@ -22,6 +22,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ secrets.BOT_TOKEN }}
 
       - name: 🙂‍↔️ Import GPG key
         run: |
@@ -32,8 +33,8 @@ jobs:
 
       - name: 🫡 Setup Git
         run: |
-          git config --global user.name "njfamirm-bot"
-          git config --global user.email "bot@njfamirm.ir"
+          git config --global user.name "Nexim Bot"
+          git config --global user.email "bot@thenexim.com"
           git config --global user.signingkey ${{ env.GPG_KEY_ID }}
           git config --global commit.gpgsign true
 
@@ -60,9 +61,6 @@ jobs:
       - name: 🏗 Install dependencies
         run: yarn install --immutable
 
-      - name: 🗃️ Cache Wireit
-        uses: google/wireit@setup-github-actions-caching/v2
-
       - name: 🚀 Build Typescript
         run: yarn build
         env:
@@ -79,7 +77,7 @@ jobs:
           WIREIT_LOGGER: metrics
 
       - name: 🤖 Get Release
-        run: yarn release -y
+        run: yarn lerna version --yes
         env:
           GITHUB_TOKEN: ${{ secrets.BOT_TOKEN }}
           WIREIT_LOGGER: metrics

.github/workflows/sync-labels.yml

@@ -6,7 +6,6 @@ on:
   workflow_dispatch:
   push:
     branches:
-      - main
       - next
     paths:
       - .github/labels.yml