ci: sign npm release via github actions

Author: azat-io

.cspell.json

@@ -15,6 +15,7 @@
     "azat",
     "browserslistrc",
     "changelogen",
+    "changelogithub",
     "execa",
     "grotesk",
     "joshuakgoldberg",

.github/workflows/release.yml

@@ -20,7 +20,19 @@ jobs:
       - name: Install Tools
         uses: ./.github/actions/install-tools
 
+      - name: Build Package
+        run: pnpm run build
+
       - name: Create GitHub Release
-        run: pnpx changelogithub
+        run: pnpm run ci:changelog
         env:
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Configure NPM Auth
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NODE_AUTH_TOKEN }}" > ~/.npmrc
+
+      - name: Clear Package JSON
+        run: pnpm run ci:clear
+
+      - name: Publish Root Package to NPM
+        run: npm publish --access public --no-git-checks --provenance

package.json

@@ -16,10 +16,16 @@
     "build": "vite build",
     "docs:dev": "astro dev",
     "docs:build": "astro build",
-    "release": "pnpm release:check && pnpm release:version && pnpm release:publish",
+    "release": "pnpm release:check && pnpm release:version && pnpm release:git",
     "release:check": "pnpm test && pnpm run build",
-    "release:publish": "clean-publish",
-    "release:version": "changelogen --output changelog.md --release --push",
+    "release:git": "pnpm release:git:add && pnpm release:git:commit && pnpm release:git:tag && pnpm release:git:push",
+    "release:git:add": "git add .",
+    "release:git:commit": "git commit -m \"build: publish v$(node -p \"require('./package.json').version\")\"",
+    "release:git:tag": "git tag v$(node -p \"require('./package.json').version\")",
+    "release:git:push": "git push --follow-tags && git push origin v$(node -p \"require('./package.json').version\")",
+    "release:version": "changelogen --output changelog.md --release --no-commit --no-tag",
+    "ci:changelog": "changelogithub",
+    "ci:clear": "clear-package-json package.json --output package.json",
     "test:astro": "astro check",
     "test:format": "prettier --check \"**/*.{astro,svelte,js,ts,json,md,yml}\"",
     "test:css": "stylelint \"docs/**/*.{astro,svelte,css}\"",
@@ -82,6 +88,7 @@
     "astro-eslint-parser": "^1.0.3",
     "browserslist": "^4.24.2",
     "changelogen": "^0.5.7",
+    "changelogithub": "^0.13.11",
     "clean-publish": "^5.1.0",
     "cspell": "^8.16.0",
     "eslint": "^9.14.0",