ci: sets up automated publishing with provenance

.github/workflows/ci.yml

@@ -32,7 +32,7 @@ jobs:
       - uses: actions/cache@v3
         with:
           path: node_modules
-          key: ${{matrix.node-version}}@${{matrix.platform}}-build-${{hashFiles('package.json')}}
+          key: ${{matrix.node-version}}@${{matrix.platform}}-build-${{hashFiles('package-lock.json')}}
           restore-keys: |
             ${{matrix.node-version}}@${{matrix.platform}}-build-
       - uses: actions/setup-node@v4
@@ -43,7 +43,7 @@ jobs:
         uses: actions/cache@v3
         with:
           path: .cache
-          key: ${{matrix.node-version}}@${{matrix.platform}}-build-eslint-${{hashFiles('package.json')}}
+          key: ${{matrix.node-version}}@${{matrix.platform}}-build-eslint-${{hashFiles('package-lock.json')}}
           restore-keys: |
             ${{matrix.node-version}}@${{matrix.platform}}-build-eslint-
         if: matrix.platform == 'ubuntu-latest' && matrix.node-version == env.NODE_LATEST
@@ -66,7 +66,7 @@ jobs:
       - uses: actions/cache@v3
         with:
           path: node_modules
-          key: ${{env.NODE_LATEST}}@${{matrix.platform}}-build-${{hashFiles('package.json')}}
+          key: ${{env.NODE_LATEST}}@${{matrix.platform}}-build-${{hashFiles('package-lock.json')}}
           restore-keys: |
             ${{env.NODE_LATEST}}@${{matrix.platform}}-build-
       - uses: actions/setup-node@v4

.github/workflows/prerelease.yml

@@ -0,0 +1,21 @@
+name: publish pre-releases as beta to npmjs
+on:
+  release:
+    types: [prereleased]
+
+jobs:
+  publish-as-beta:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 21.x
+          registry-url: https://registry.npmjs.org
+      - run: npm clean-install
+      - run: npm publish --provenance --access public --tag beta
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/release.yml

@@ -0,0 +1,21 @@
+name: publish to npmjs
+on:
+  release:
+    types: [released]
+
+jobs:
+  publish-as-latest:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 21.x
+          registry-url: https://registry.npmjs.org
+      - run: npm clean-install
+      - run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.gitignore

@@ -22,6 +22,5 @@ dependency-violations.html
 isolate-*-v8.log
 npm-debug.log
 yarn-error.log
-package-lock.json
 .pnp*
 *.tgz

.npmrc

@@ -1,3 +1,3 @@
-package-lock = false
+package-lock = true
 save-exact = true
 engine-strict = true