publish-packages-github.yml

name: Publish Packages (GitHub Packages)

on:
  # push:
  #   branches:
  #     - master
  #     - main
  #   tags:
  #     - "v*"
  workflow_dispatch:

concurrency:
  group: publish-packages-github-${{ github.ref }}
  cancel-in-progress: true

jobs:
  # The package list comes from list-packages.sh so that it cannot drift from
  # publish.sh. It used to be spelled out here, and four packages were missing.
  list-packages:
    runs-on: ubuntu-latest
    outputs:
      packages: ${{ steps.list.outputs.packages }}
    steps:
      - name: Check out repository
        uses: actions/checkout@v4
      - name: List publishable packages
        id: list
        run: |
          echo "packages=$(./list-packages.sh | jq -Rsc 'split("\n") | map(select(length > 0))')" >> "${GITHUB_OUTPUT}"

  build-and-publish:
    needs: list-packages
    runs-on: ubuntu-latest

    permissions:
      contents: read
      packages: write

    strategy:
      fail-fast: false
      matrix:
        path: ${{ fromJSON(needs.list-packages.outputs.packages) }}

    defaults:
      run:
        working-directory: ${{ matrix.path }}

    steps:
      - name: Check out repository
        uses: actions/checkout@v4
      - name: Configure GitHub Packages auth
        run: |
          cat <<EOF > ~/.npmrc
          @${{ github.repository_owner }}:registry=https://npm.pkg.github.com
          //npm.pkg.github.com/:_authToken=${GITHUB_TOKEN}
          EOF
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Set up Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest

      - name: Install dependencies
        run: bun install
      - name: Update dependencies
        run: bun update

      - name: Publish package
        run: bun publish --registry https://npm.pkg.github.com/
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_CONFIG_TOKEN: ${{ secrets.GITHUB_TOKEN }}