rework

Signed-off-by: Alexander Dahmen <alexander.dahmen@inovex.de>

Author: Fyusel

.github/workflows/release.yaml

@@ -16,7 +16,8 @@ env:
   NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
   PROVIDER: stackit
   PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
-  PUBLISH_NPM: true
+  # TODO: change to true if ready to release
+  PUBLISH_NPM: false
   #NUGET_PUBLISH_KEY: ${{ secrets.NUGET_PUBLISH_KEY }}
   #NUGET_FEED_URL: https://api.nuget.org/v3/index.json
   #PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
@@ -26,7 +27,7 @@ env:
   #PUBLISH_NUGET: true
 jobs:
   publish_binary:
-    name: publish
+    name: Publish provider
     runs-on: ubuntu-latest
     steps:
       # TODO: remove when this repo is made public
@@ -51,8 +52,6 @@ jobs:
         uses: ./.github/actions/gotools
         with:
           go-version: ${{ matrix.goversion }}
-      #- name: Set PreRelease Version
-      #  run: echo "GORELEASER_CURRENT_TAG=v$(pulumictl get version --language generic)" >> $GITHUB_ENV
       - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
       - uses: anchore/sbom-action/download-syft@fbfd9c6c189226748411491745178e0c2017392d # v0.20.10
       - name: Debugging what was changed
@@ -71,7 +70,7 @@ jobs:
         goversion:
           - 1.24.x
   publish_sdk:
-    name: Publish SDKs
+    name: Publish SDKs to npm Registry, NuGet Gallery and Python Package Index
     runs-on: ubuntu-latest
     needs: publish_binary
     steps:
@@ -87,28 +86,15 @@ jobs:
         uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # tag=v4.2.2
       - name: Unshallow clone for tags
         run: git fetch --prune --unshallow --tags
-      - name: Install pulumictl
-        uses: jaxxstorm/action-install-gh-release@6096f2a2bbfee498ced520b6922ac2c06e990ed2 # tag=v2.1.0
-        with:
-          repo: pulumi/pulumictl
-      - name: Install pulumi
-        uses: pulumi/actions@v6
       - name: Install Go Tools
         uses: ./.github/actions/gotools
         with:
           go-version: ${{ matrix.goversion }}
-      - name: Setup Node
-        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # tag=v6.0.0
-        with:
-          node-version: ${{matrix.nodeversion}}
-          #registry-url: ${{env.NPM_REGISTRY_URL}}
-      - name: Setup DotNet
-        uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # tag=v5.0.0
+      - name: Install Pulumi Tools
+        uses: ./.github/actions/pulumitools
         with:
           dotnet-version: ${{matrix.dotnetverson}}
-      - name: Setup Python
-        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # tag=v6.0.0
-        with:
+          node-version: ${{matrix.nodeversion}}
           python-version: ${{matrix.pythonversion}}
       - name: Build SDK
         run: make build_${{ matrix.language }}
@@ -135,15 +121,16 @@ jobs:
         uses: JS-DevTools/npm-publish@7f8fe47b3bea1be0c3aec2b717c5ec1f3e03410b # tag=v4.1.1
         with:
           access: "public"
-          #token: ${{ env.NPM_TOKEN }}
-          token: ${{ secrets.PR_TOKEN }}
+          # old way, we want to use Trusted publishers
+          # token: ${{ env.NPM_TOKEN }}
           package: ${{github.workspace}}/sdk/nodejs/bin/package.json
           provenance: true
       - if: ${{ matrix.language == 'dotnet' && env.PUBLISH_NUGET == 'true' }}
         name: publish nuget package
         run: |
           dotnet nuget push ${{github.workspace}}/sdk/dotnet/bin/Debug/*.nupkg -s ${{ env.NUGET_FEED_URL }} -k ${{ env.NUGET_PUBLISH_KEY }}
           echo "done publishing packages"
+      # TODO: publish go sdk to github
     strategy:
       fail-fast: true
       matrix: