chore: keep the publish credential away from the code it publishes (#4) #12

	name: CI

	on:
	push:
	branches: [main, feat/**]
	pull_request:

	permissions:
	contents: read

	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	build-test:
	runs-on: ubuntu-latest
	strategy:
	fail-fast: false
	matrix:
	node: [20, 22, 24]
	name: node ${{ matrix.node }}
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version: ${{ matrix.node }}
	cache: yarn

	- name: Install
	run: yarn install --frozen-lockfile

	- name: Build
	run: yarn run build

	# The examples compile contracts with blanc++, which is not available here,
	# so CI runs the VM suite only.
	- name: Test
	run: yarn mocha 'src/*/.spec.ts' -r ts-node/register

	# npm pack runs prepack, so this step needs the install above.
	- name: Packaging
	run: bash scripts/packaging.test.sh

	release-notes:
	runs-on: ubuntu-latest
	name: release notes
	steps:
	- uses: actions/checkout@v4

	# The script builds its own git repository under mktemp and sets the
	# commit identity inside it, so the job needs no node setup and no git
	# configuration of its own.
	- name: Test
	run: bash scripts/release-notes.test.sh

Navigation Menu