Setup trusted publishing for npm packages, restructure workflows (#720)

Co-authored-by: Copilot <copilot@github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: 3 people

.github/workflows/ci.yml

@@ -109,7 +109,7 @@ jobs:
 
     - if: ${{ env.RELEASE_KEY_SECRET != '' }}
       run: |
-        wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssl1.0/libssl1.0.0_1.0.2n-1ubuntu5_amd64.deb
+        wget https://archive.ubuntu.com/ubuntu/pool/main/o/openssl1.0/libssl1.0.0_1.0.2n-1ubuntu5_amd64.deb
         sudo dpkg -i libssl1.0.0_1.0.2n-1ubuntu5_amd64.deb
         curl -L -o /opt/secure-file.zip https://github.com/appveyor/secure-file/releases/download/1.0.1/secure-file.zip
         unzip /opt/secure-file.zip -d /opt/secure-file

.github/workflows/publish.yml

@@ -0,0 +1,102 @@
+name: Publish
+
+on:
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: 'Dry run (skip actual publishing)'
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+env:
+  NPM_CONFIG_AUDIT: "false"
+  NPM_CONFIG_FUND: "false"
+  DOTNET_CLI_TELEMETRY_OPTOUT: "true"
+  NUGET_XMLDOC_MODE: "skip"
+
+jobs:
+
+  pack:
+    runs-on: ubuntu-24.04
+
+    env:
+      RELEASE_KEY_SECRET: ${{ secrets.RELEASE_KEY_SECRET }}
+      DOTNET_SYSTEM_GLOBALIZATION_INVARIANT: 1
+
+    steps:
+    - uses: actions/setup-dotnet@v4
+      with:
+        dotnet-quality: ga
+        dotnet-version: |
+          3.1
+          8.0
+
+    - uses: actions/setup-node@v4
+      with:
+        node-version: '24'
+
+    - uses: actions/checkout@v4
+
+    - name: Decrypt signing key
+      if: ${{ env.RELEASE_KEY_SECRET != '' }}
+      run: |
+        wget https://archive.ubuntu.com/ubuntu/pool/main/o/openssl1.0/libssl1.0.0_1.0.2n-1ubuntu5_amd64.deb
+        sudo dpkg -i libssl1.0.0_1.0.2n-1ubuntu5_amd64.deb
+        curl -L -o /opt/secure-file.zip https://github.com/appveyor/secure-file/releases/download/1.0.1/secure-file.zip
+        unzip /opt/secure-file.zip -d /opt/secure-file
+        dotnet /opt/secure-file/secure-file.dll -decrypt net/DevExtreme.AspNet.Data/release.snk.enc -secret ${{ env.RELEASE_KEY_SECRET }}
+
+    - name: Build no-jquery package
+      run: node build/make-nojquery
+
+    - name: Set package versions
+      run: node build/replace-meta "${{ github.run_number }}" "${{ github.ref }}" "${{ github.repository }}"
+
+    - name: Pack npm packages
+      run: |
+        npm pack
+        npm pack ./js-nojquery
+
+    - name: Pack NuGet package
+      if: ${{ env.RELEASE_KEY_SECRET != '' }}
+      run: dotnet pack net/DevExtreme.AspNet.Data --configuration=Release --include-symbols
+
+    - name: Upload NuGet packages as artifacts
+      if: ${{ env.RELEASE_KEY_SECRET != '' }}
+      uses: actions/upload-artifact@v4
+      with:
+        name: nuget-packages
+        path: net/DevExtreme.AspNet.Data/bin/Release/*.nupkg
+
+    - name: Upload npm packages as artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: npm-packages
+        path: devextreme-aspnet-data-*.tgz
+
+  publish:
+    runs-on: ubuntu-latest
+    needs: pack
+    if: startsWith(github.ref, 'refs/tags/')
+    environment: npmjs
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+    - uses: actions/setup-node@v4
+      with:
+        node-version: '24'
+        registry-url: 'https://registry.npmjs.org'
+
+    - uses: actions/download-artifact@v4
+      with:
+        name: npm-packages
+
+    - name: Publish to npmjs
+      run: |
+        npm publish devextreme-aspnet-data-nojquery-*.tgz --provenance --access public ${{ inputs['dry-run'] && '--dry-run' || '' }}
+        npm publish devextreme-aspnet-data-[0-9]*.tgz --provenance --access public ${{ inputs['dry-run'] && '--dry-run' || '' }}