ci: refactor release workflow

Author: OliverDudgeon

.github/workflows/release.yaml

@@ -1,58 +1,53 @@
-name: Release
+name: release
+
 on:
   push:
     branches:
       - main
       - dev
-  pull_request:
-    types:
-      - closed
 
 permissions:
-  contents: write
-  issues: write
-  pull-requests: write
+  contents: read
+  id-token: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   release:
-    name: Release
     runs-on: ubuntu-latest
+    environment: semantic-release
     steps:
       - name: Checkout
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - name: Install pnpm
-        uses: pnpm/action-setup@v2
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
         with:
-          version: 8
+          version: 10.24.0
           run_install: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
-          cache: "pnpm"
+          node-version: 22.21.1
+          cache: pnpm
 
-      - name: Get pnpm store directory
-        shell: bash
-        run: |
-          echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
 
-      - name: Setup pnpm cache
-        uses: actions/cache@v3
+      - uses: actions/create-github-app-token@v2
+        id: app-token
         with:
-          path: ${{ env.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
-
-      - name: Install dependencies
-        run: pnpm install
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
-      - name: Release
+      - name: Semantic Release
+        uses: cycjimmy/semantic-release-action@v4
+        id: semantic
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
-        run: pnpm release
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
+          SEMANTIC_RELEASE_DEBUG: true

.releaserc.json

@@ -0,0 +1,29 @@
+/**
+ * @type {import('semantic-release').GlobalConfig}
+ */
+const config = {
+  branches: ["main", { name: "dev", channel: "dev", prerelease: "dev" }],
+  plugins: [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    ["@semantic-release/changelog", { changelogFile: "CHANGELOG.md" }],
+    [
+      "@semantic-release/exec",
+      {
+        prepareCmd: "pnpm install --no-frozen-lockfile",
+      },
+    ],
+    ["@semantic-release/npm", { npmPublish: true, provenance: true }],
+    [
+      "@semantic-release/git",
+      {
+        assets: ["CHANGELOG.md", "package.json"],
+        message:
+          "chore: release ${nextRelease.version} [skip ci]\n\n${nextRelease.notes}",
+      },
+    ],
+    "@semantic-release/github",
+  ],
+};
+
+export default config;