name: Publish NPM
on:
  push:
    tags:
      - 'v[0-9]+.[0-9]+.[0-9]+'

# Make sure a connection for trusted publisher is enabled on the npmjs repo
permissions:
  id-token: write  # Required for OIDC
  contents: read

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7

      - uses: actions/setup-node@v7
        with:
          node-version: '24'

      - run: npm install -g npm@latest
      - run: npm install -g yarn@latest

      - run: yarn install --frozen-lockfile
      - run: yarn build:asc

      # OIDC-aware publish:
      - run: npm publish --access public