release.yml

name: Release

on:
  push:
    branches: [main]

permissions:
  contents: write # create tags + commits
  issues: write # comment on issues
  pull-requests: write # comment on PRs
  id-token: write # npm provenance

jobs:
  release:
    name: Semantic Release
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0 # full history so semantic-release can walk commits
          persist-credentials: false

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm
          registry-url: https://registry.npmjs.org

      - name: Install dependencies
        run: npm ci

      - name: Type check
        run: npm run typecheck

      - name: Build
        run: npm run build

      - name: Release
        env:
          GITHUB_TOKEN: ${{ secrets.AUTO_PR_TOKEN }}
          NPM_CONFIG_PROVENANCE: 'true'
        run: npx semantic-release

      - name: Notify homebrew tap
        run: |
          VERSION=$(node -p "require('./package.json').version")
          curl -s --fail -X POST \
            -H "Authorization: token ${{ secrets.AUTO_PR_TOKEN }}" \
            -H "Accept: application/vnd.github.v3+json" \
            https://api.github.com/repos/node9-ai/homebrew-node9/dispatches \
            -d "$(jq -n --arg v "$VERSION" '{event_type:"new-release",client_payload:{version:$v}}')"