publish.yml

name: Publish

on:
  workflow_dispatch:
    inputs:
      tag:
        description: 'The tag to apply to the published version in npm'
        required: true
        default: 'latest'
        type: string

env:
  JOB_NODE_VERSION: '20.17.0'  # Chosen to match what is used internally by the Heroku CLI

jobs:
  publish:
    runs-on: ubuntu-latest

    permissions:
      contents: read
      id-token: write

    steps:
      - uses: actions/checkout@v4

      - name: Install Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.JOB_NODE_VERSION }}
          registry-url: 'https://registry.npmjs.org'
          cache: yarn

      - name: Install dependencies
        run: yarn install --immutable --immutable-cache --check-cache

      - name: Publish to npm
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: npm publish --provenance --tag ${{ github.event.inputs.tag }}