From 52a1d1bbfbe31e4538294999f4ca9e3dcbc1d09a Mon Sep 17 00:00:00 2001 From: Yury Semikhatsky Date: Thu, 3 Sep 2026 11:30:16 -0700 Subject: [PATCH] devops: restore npm publishing from GitHub Actions Release publishing goes back to the GitHub Actions workflow with OIDC trusted publishing and provenance. The ESRP pipeline stays available for manual on-demand runs only. --- .azure-pipelines/publish.yml | 13 ++++++------- .github/workflows/publish.yml | 21 +++++++++++++++++++++ 2 files changed, 27 insertions(+), 7 deletions(-) create mode 100644 .github/workflows/publish.yml diff --git a/.azure-pipelines/publish.yml b/.azure-pipelines/publish.yml index 81c0444..a7057ab 100644 --- a/.azure-pipelines/publish.yml +++ b/.azure-pipelines/publish.yml @@ -1,10 +1,9 @@ -# Publishes @playwright/cli via ESRP: -# - @next (alpha with current timestamp) from main, on manual trigger -# - @latest from v* release tags (pushed when a GitHub release is published) -trigger: - tags: - include: - - v* +# Publishes @playwright/cli via ESRP. Manual trigger only, regular publishing +# is done from GitHub Actions, see .github/workflows/publish.yml. +# Depending on the selected ref, a manual run publishes: +# - @next (alpha with current timestamp) from main +# - @latest from v* release tags +trigger: none pr: none diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml new file mode 100644 index 0000000..b3f36fe --- /dev/null +++ b/.github/workflows/publish.yml @@ -0,0 +1,21 @@ +name: Publish +on: + workflow_dispatch: + release: + types: [published] + +jobs: + publish-npm: + if: github.event_name == 'release' + runs-on: ubuntu-latest + permissions: + contents: read + id-token: write # Required for OIDC npm publishing + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + with: + node-version: 24 + registry-url: https://registry.npmjs.org/ + - run: npm ci + - run: npm publish