cd.yml

# Builds package and publishes it on npm.
name: CD

on:
  push:
    branches:
      - master

jobs:
  build:
    runs-on: ubuntu-latest

    permissions:
      contents: write
      issues: write
      pull-requests: write
      id-token: write

    steps:
      - name: Check out branch
        uses: actions/checkout@v4
        with:
          fetch-depth: 0 # Fetch all branches

      - name: Use Node.js v20
        uses: actions/setup-node@v4
        with:
          node-version: 20.x

      - name: Install modules
        run: npm ci --no-audit --ignore-scripts

      - name: Verify the integrity of installed dependencies
        run: npm audit signatures

      - name: Lint
        run: npm run lint

      - name: Publish release
        run: npx semantic-release
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}