npm-publish.yaml

name: Publish Package to npmjs

on:
  push:
    paths:
      - 'boundaries/platform/ui-kit/**'
    branches:
      - 'main'

permissions:
  contents: read

jobs:
  build:
    if: github.repository == 'shortlink-org/shortlink'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
        with:
          egress-policy: audit

      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Install pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 9
          run_install: false

      - name: Install Node.js
        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
        with:
          node-version: '23.x'
          cache: 'pnpm'
          cache-dependency-path: './boundaries/platform/ui-kit/pnpm-lock.yaml'
          registry-url: 'https://registry.npmjs.org'

      - name: Install dependencies
        run: pnpm install --frozen-lockfile
        working-directory: ./boundaries/platform/ui-kit

      - run: sed -i 's/@shortlink-org\/ui-kit/shortlink-ui-kit/g' package.json
        working-directory: ./boundaries/platform/ui-kit

      - name: Publish 🚀
        run: pnpm publish --provenance --access public --registry https://registry.npmjs.org --no-git-checks
        working-directory: ./boundaries/platform/ui-kit
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}