Publish to npm #20

	name: Publish to npm

	on:
	workflow_dispatch:
	inputs:
	bump:
	description: 'Version bump type'
	required: true
	default: 'minor'
	type: choice
	options:
	- patch
	- minor
	- major

	push:
	branches:
	- main
	paths:
	- 'package.json'
	- 'index.js'

	permissions:
	id-token: write
	contents: write

	jobs:
	publish:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v5

	- name: Set up Node.js
	uses: actions/setup-node@v6
	with:
	node-version: '24'
	registry-url: 'https://registry.npmjs.org'

	- name: Update npm
	run: npm install -g npm@latest

	- name: Install dependencies
	run: npm install

	- name: Verifying provenance attestations
	run: npm audit signatures

	- name: Bump version and create tag
	id: bump-version
	run: \|
	git config --global user.name "github-actions[bot]"
	git config --global user.email "github-actions[bot]@users.noreply.github.com"
	TAG=$(npm version ${{ github.event.inputs.bump \|\| 'minor' }} -m "Release %s")
	echo "Created tag: $TAG"
	echo "tag=$TAG" >> "$GITHUB_OUTPUT"
	git push origin main --follow-tags

	- name: Publish to npm
	run: npm publish --provenance --access=public

	- name: Create GitHub Release
	uses: softprops/action-gh-release@v2
	with:
	tag_name: ${{ steps.bump-version.outputs.tag }}
	generate_release_notes: true
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback