chore: update publish and verify workflows to improve npm commands and add release drafting

Author: bhovhannes

.github/workflows/publish.yml

@@ -23,7 +23,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          ssh-key: ${{ secrets.DEPLOY_KEY }}
       - name: Check if on main branch
         run: |
           if [[ $GITHUB_REF != 'refs/heads/main' ]]; then
@@ -36,16 +36,23 @@ jobs:
           cache: 'npm'
           registry-url: 'https://registry.npmjs.org'
           scope: '@workfront'
-      - run: npm ci
+      - run: npm ci --no-fund --no-audit
       - name: Bump package version
         run: |
           git config --global user.name 'github-actions[bot]'
           git config --global user.email 'github-actions[bot]@users.noreply.github.com'
           echo "Bumping version as ${{ github.event.inputs.SEMVER_TYPE }}"
-          npm version ${{ github.event.inputs.SEMVER_TYPE }}
-          VERSION=$(node -p "require('./package.json').version")
+          npm version --no-commit-hooks ${{ github.event.inputs.SEMVER_TYPE }}
           git push origin main --follow-tags
-      - run: npm publish --provenance --access public
+      - name: Publish to NPM
+        run: npm publish --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Draft release
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          gh release create v$VERSION --generate-notes --draft --verify-tag --fail-on-no-commits
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VERSION: ${{ inputs.next_version }}

.github/workflows/verify.yml

@@ -20,5 +20,5 @@ jobs:
           cache: 'npm'
           registry-url: 'https://registry.npmjs.org'
           scope: '@workfront'
-      - run: npm ci
+      - run: npm ci --no-fund --no-audit
       - run: npm run build