boardgameio / boardgame.io / 28722914475

100%

master: 100%

push

github

ci(publish): modernize the release workflow for the pnpm/Node 24 stack (#1254)

The publish workflow was never modernized alongside #1244/#1245 and was
left broken: it ran `npm ci` although the repo migrated to pnpm and no
longer has a package-lock.json, and it used long-EOL actions
(checkout@v2, setup-node@v1, Node 12, JS-DevTools/npm-publish@v1).

Port the vetted, SHA-pinned pnpm workflow:
- SHA-pin checkout (v6.0.2), pnpm/action-setup (v4.4.0) and setup-node
  (v6.4.0) to match ci.yml.
- Install with `pnpm install --frozen-lockfile`; run lint, typecheck,
  test and integration on Node 24.
- Publish with `npm publish --provenance --access public` (OIDC Trusted
  Publisher, `id-token: write`), replacing the token-based
  JS-DevTools/npm-publish action.

Supersedes the stale action-bump PRs #1246, #1248 and #1249.

NOTE: `npm publish --provenance` requires a Trusted Publisher to be
configured for the `boardgame.io` package on npmjs.org. It only runs on
version tags, so this does not affect CI/PRs.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: Rupesh Pandey <pandeyrupesh00@gmail.com>

1789 of 1789 branches covered (100.0%)

Branch coverage included in aggregate %.

2677 of 2677 relevant lines covered (100.0%)

28597.49 hits per line