Release latest when new v* tag is pushed

Author: SamuelMarks

.github/workflows/ci.yml

@@ -4,10 +4,16 @@ on:
     push:
         branches:
             - master
+        tags:
+            - 'v*.*.*'
+            - '*.*.*'
 
 jobs:
     ci:
         runs-on: ubuntu-latest
+        permissions:
+            contents: write
+            id-token: write
         steps:
             - uses: actions/checkout@v6
 
@@ -42,6 +48,7 @@ jobs:
             - uses: actions/setup-node@v6
               with:
                   node-version: 'lts/*'
+                  registry-url: 'https://registry.npmjs.org'
 
             - name: Install requirements
               run: npm ci
@@ -117,3 +124,41 @@ jobs:
                   files: ./coverage/junit.xml
                   disable_search: true
                   verbose: true
+
+            - name: Archive build
+              if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
+              run: tar -czvf dist.tar.gz dist/
+
+            - name: Upload Artifacts (Version Tag)
+              if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
+              uses: ncipollo/release-action@v1
+              with:
+                  artifacts: "dist.tar.gz,bin/cdd-ts.js,bin/cdd-ts.wasm,bin/typescript-go.wasm,bin/cdd-ts-javy.wasm,bin/cdd-ts-go-javy.wasm"
+                  allowUpdates: true
+                  replacesArtifacts: true
+
+            - name: Update latest tag
+              if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+              run: |
+                  gh release delete latest --cleanup-tag -y || true
+                  git push origin :refs/tags/latest || true
+                  git tag -f latest ${{ github.sha }}
+                  git push -f origin latest
+
+            - name: Create Latest Release
+              if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+              uses: ncipollo/release-action@v1
+              with:
+                  tag: latest
+                  name: Latest Release
+                  artifacts: "dist.tar.gz,bin/cdd-ts.js,bin/cdd-ts.wasm,bin/typescript-go.wasm,bin/cdd-ts-javy.wasm,bin/cdd-ts-go-javy.wasm"
+                  allowUpdates: true
+                  replacesArtifacts: true
+
+            - name: Publish to npmjs
+              if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+              run: npm publish --provenance --access public
+              env:
+                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}