Setup OIDC (#38)

* merge workflows

* ensure we match `0.0.0-insiders.<hash>`

* bump node versions

* add `@types/node`

Author: RobinMalfait

.github/workflows/nodejs.yml

@@ -18,7 +18,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [14, 16, 18]
+        node-version: [24]
 
     steps:
       - uses: actions/checkout@v3

.github/workflows/prepare-release.yml

@@ -21,7 +21,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [14]
+        node-version: [24]
 
     steps:
       - uses: actions/checkout@v3

.github/workflows/release-insiders.yml

@@ -1,6 +1,8 @@
 name: Release
 
 on:
+  push:
+    branches: [main]
   release:
     types: [published]
 
@@ -14,22 +16,17 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [14]
+        node-version: [24]
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
           registry-url: 'https://registry.npmjs.org'
-
-      - name: Use cached node_modules
-        uses: actions/cache@v3
-        with:
-          path: node_modules
-          key: nodeModules-${{ hashFiles('./package-lock.json') }}-${{ matrix.node-version }}
+          cache: 'npm'
 
       - name: Install dependencies
         run: npm install
@@ -40,11 +37,20 @@ jobs:
       - name: Test
         run: npm test
 
-      - name: Calculate environment variables
+      - name: Resolve release metadata
         run: |
-          echo "RELEASE_CHANNEL=$(npm run release-channel --silent)" >> $GITHUB_ENV
+          if [ "${{ github.event_name }}" = "release" ]; then
+            echo "RELEASE_KIND=release" >> $GITHUB_ENV
+            echo "RELEASE_CHANNEL=$(npm run release-channel --silent)" >> $GITHUB_ENV
+          else
+            echo "RELEASE_KIND=insiders" >> $GITHUB_ENV
+            echo "INSIDERS_VERSION=0.0.0-insiders.$(git rev-parse --short HEAD)" >> $GITHUB_ENV
+            echo "RELEASE_CHANNEL=insiders" >> $GITHUB_ENV
+          fi
+
+      - name: Version based on commit
+        if: env.RELEASE_KIND == 'insiders'
+        run: npm version "$INSIDERS_VERSION" --force --no-git-tag-version
 
       - name: Publish
-        run: npm publish --provenance --tag ${{ env.RELEASE_CHANNEL }}
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --provenance --tag "$RELEASE_CHANNEL"

.github/workflows/release.yml

@@ -46,6 +46,7 @@
     "@swc/core": "^1.3.7",
     "@swc/jest": "^0.2.23",
     "@types/jest": "^29.1.2",
+    "@types/node": "18.8.4",
     "jest": "^29.1.2",
     "postcss": "^8.4.17",
     "prettier": "^2.7.1",

package.json

@@ -10,7 +10,7 @@
 let version =
   process.argv[2] || process.env.npm_package_version || require('../package.json').version
 
-let match = /\d+\.\d+\.\d+-(.*)\.\d+/g.exec(version)
+let match = /\d+\.\d+\.\d+-(.*)(\.\d+)?/g.exec(version)
 if (match) {
   console.log(match[1])
 } else {