Merge pull request #161 from boscop-fr/feature-trusted-publishing

Npm trusted publishing

Author: felixgirault

.github/workflows/publish.yml

@@ -0,0 +1,29 @@
+name: Publication
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    env:
+      DIST_TAG: |-
+        ${{ case(
+          contains(github.ref_name, 'alpha'), 'alpha',
+          startsWith(github.ref_name, 'v2'), 'previous',
+          'latest'
+        ) }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - run: npm ci
+      - run: npx playwright install --with-deps
+      - run: npm publish --tag $DIST_TAG

.npmrc

@@ -1 +1,2 @@
 registry=https://registry.npmjs.org
+provenance=true

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "orejime",
-  "version": "3.1.1",
+  "version": "3.1.2-alpha.0",
   "description": "A lightweight and accessible consent manager",
   "repository": {
     "type": "git",