on: push: branches: - master permissions: contents: write pull-requests: write issues: write id-token: write name: release jobs: release-please: runs-on: ubuntu-latest outputs: release_created: ${{ steps.release.outputs.release_created }} steps: - uses: googleapis/release-please-action@v4 id: release publish: needs: release-please if: ${{ needs.release-please.outputs.release_created }} runs-on: ubuntu-latest permissions: contents: read id-token: write steps: - uses: actions/checkout@v4 - uses: actions/setup-node@v4 with: node-version: 24 registry-url: 'https://registry.npmjs.org' - run: npm ci - run: npm publish --provenance --access public