axios/.github/workflows/publish.yml

name: Publish package to NPM

on:
  push:
    tags:
      - 'v1.*.*'

permissions:
  contents: read
  id-token: write

jobs:
  publish:
    runs-on: ubuntu-latest
    environment: npm-publish
    steps:
      - name: Checkout repo
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 26.x
          registry-url: 'https://registry.npmjs.org'
          package-manager-cache: false

      # `npm stage publish` requires npm >= 11.15.0, newer than the npm bundled with
      # this workflow's Node. Remove this step once Node bundles npm >= 11.15.0 by default.
      - name: Pin npm with staged-publishing support
        run: npm install -g npm@11.15.0

      - name: Install dependencies
        run: npm ci --ignore-scripts

      - name: Build project
        run: npm run build

      - name: Publish to NPM
        run: npm stage publish --provenance --access public