release.yml

name: publish npm packages
# on:
#   push:
#     branches:
#       - main

on:
  pull_request:

env:
  FORCE_COLOR: "1"

jobs:
  publish:
    # environment: Production
    runs-on: ledgerhq-shared-medium
    permissions:
      id-token: write
      contents: write
      pull-requests: read
    steps:
      - uses: actions/checkout@v4

      - uses: ./.github/actions/setup-toolchain-composite

      - name: install dependencies
        run: pnpm install

      - name: build libraries
        run: pnpm build
      
      - name: Login to JFrog Ledger
        id: jfrog-login
        uses: LedgerHQ/actions-security/actions/jfrog-login@actions/jfrog-login-1
      
      - name: Setup npm config
        env: 
          NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-prod-public
        run: |
          cat << EOF | tee .npmrc
          # Setup JFrog registry
          registry=https://${NPM_REGISTRY}
          //${NPM_REGISTRY}/:_authToken=${{ steps.jfrog-login.outputs.oidc-token }}
          EOF

      - name: Publish to npm
        uses: changesets/action@v1
        with:
          publish: pnpm release
        env:
          GITHUB_TOKEN: ${{ secrets.CI_BOT_TOKEN }}
          NPM_TOKEN: ${{ steps.jfrog-login.outputs.oidc-token }}