release.yml

name: Publish to npm.js

on:
  release:
    types: [published]

jobs:
  publish:
    runs-on: ubuntu-22.04
    permissions:
      contents: read
      id-token: write

    steps:
      - name: Clone repo
        uses: actions/checkout@v4

      - name: Set .nvmrc content to stage output
        id: nvmrc
        run: |
          echo "node_version=$(cat .nvmrc | sed 's/v//g')" >> $GITHUB_OUTPUT

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ steps.nvmrc.outputs.node_version }}
          registry-url: 'https://registry.npmjs.org'

      - name: Install dependencies
        run: npm ci

      - name: Login to DockerHub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
        with:
          platforms: linux/amd64,linux/arm64

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      -
        name: Build and push
        uses: docker/build-push-action@v6
        with:
          push: true
          tags: ${{ github.repository }}:latest,${{ github.repository }}:${{ github.event.release.tag_name }}
          context: .
          file: Dockerfile
          platforms: linux/amd64,linux/arm64

      # publish to npm after docker image is built and pushed.
      # this to avoid publishing to npm registry before a possible docker image build failure
      - name: Publish to npm
        run: npm publish --provenance --access public
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}