chore: introduce semantic release

.github/workflows/npm.yml

@@ -6,11 +6,16 @@ jobs:
   build:
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
+      issues: write
+      pull-requests: write
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Install pnpm
         uses: pnpm/action-setup@v4
@@ -29,7 +34,12 @@ jobs:
       - name: Build
         run: pnpm run build
 
+      - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+        run: pnpm audit signatures
+
       - name: Publish to npm
-        run: pnpm publish -r --provenance --access public --no-git-checks
+        run: pnpm run release
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -8,9 +8,12 @@
     "lint": "pnpm run -r lint",
     "test": "LC_ALL=en_US.UTF-8 vitest",
     "typecheck": "pnpm run -r typecheck",
-    "bundle-monorepo": "node bundle-monorepo.js"
+    "bundle-monorepo": "node bundle-monorepo.js",
+    "release": "semantic-release"
   },
   "devDependencies": {
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/git": "^10.0.1",
     "@typescript-eslint/eslint-plugin": "^6.7.4",
     "@typescript-eslint/parser": "^6.7.4",
     "eslint": "^8.38.0",
@@ -19,6 +22,7 @@
     "eslint-plugin-jsx-a11y": "^6.7.1",
     "eslint-plugin-react": "^7.33.2",
     "eslint-plugin-react-hooks": "^4.6.0",
+    "semantic-release": "^24.2.2",
     "typescript": "^5.1.6",
     "vitest": "^3.0.5"
   },
@@ -30,5 +34,14 @@
     "url": "https://github.com/yamitzky/synk-calendar.git"
   },
   "license": "MIT",
-  "packageManager": "[email protected]"
+  "packageManager": "[email protected]",
+  "pnpm": {
+    "overrides": {
+      "vite@>=5.1.0 <=5.1.6": ">=5.1.7",
+      "vite@>=5.0.0 <=5.1.7": ">=5.1.8",
+      "vite@>=5.0.0 <5.1.8": ">=5.1.8",
+      "cookie@<0.7.0": ">=0.7.0",
+      "vite@>=5.0.0 <=5.4.11": ">=5.4.12"
+    }
+  }
 }