Move to Github action release workflows

.changeset/config.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://unpkg.com/@changesets/[email protected]/schema.json",
+  "changelog": false,
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "privatePackages": {
+    "version": true,
+    "tag": true
+  }
+}

.changeset/sixty-roses-learn.md

@@ -0,0 +1,5 @@
+---
+"shopify-buy": patch
+---
+
+Adding changeset and github ci release with provenance

.github/workflows/release.yml

@@ -0,0 +1,49 @@
+name: Release new NPM version
+
+on:
+  pull_request:
+    types: [closed]
+    branches:
+      - main
+
+concurrency:
+  group: changeset-${{ github.head_ref }}
+  cancel-in-progress: true
+
+jobs:
+  npm:
+    name: Changeset release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
+    steps:
+      - name: Checkout the repo
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.x
+          cache: 'npm'
+          cache-dependency-path: '**/package-lock.json'
+
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps
+
+      - name: Build package
+        run: npm run build
+
+      # - name: Publish to NPM
+      #   id: changesets
+      #   uses: changesets/action@v1
+      #   with:
+      #     version: npm run version
+      #     publish: npm run changeset publish
+      #   env:
+      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      #     NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      #     NPM_CONFIG_PROVENANCE: true

.github/workflows/ci.yml → .github/workflows/test.yml

@@ -1,4 +1,4 @@
-name: CI
+name: CI Tests
 
 on:
   push:
@@ -12,12 +12,12 @@ jobs:
     steps:
     - name: Checkout repo
       uses: actions/checkout@v3
-    - name: Setup node and yarn
+    - name: Setup node and npm
       uses: actions/setup-node@v3
       with:
         cache: npm
     - name: NPM install
-      run: npm ci
+      run: npm ci --legacy-peer-deps
       shell: bash
     - run: npm test
 

.github/workflows/upload-release-cdn.yml

@@ -0,0 +1,46 @@
+name: Upload release to CDN (AWS S3)
+
+on:
+  pull_request:
+    types: [closed]
+    branches:
+      - main
+
+concurrency:
+  group: changeset-${{ github.head_ref }}
+  cancel-in-progress: true
+
+jobs:
+  upload:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout the repo
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.x
+          cache: 'npm'
+          cache-dependency-path: '**/package-lock.json'
+
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps
+
+      - name: Build package
+        run: npm run build
+
+      - name: Decrypt secrets
+        run: |
+          echo "EJSON decrypt key is: ${{ secrets.EJSON_SECRET }}" # > ejson_secret.txt
+          npx ejson decrypt -o secrets.json secrets.ejson
+        env:
+          EJSON_SECRET: ${{ secrets.EJSON_SECRET }} # Your secret key for decryption
+
+      # - name: Upload built assets
+      #   run: node scripts/upload-to-cdn.js
+      #   env:
+      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+

.gitignore

@@ -14,10 +14,14 @@ optimized-types.js
 # Build artifacts
 index.*
 !docs/index.html
+build
 
 # Decrypted secrets
 secrets.json
 .nvmrc
 
+.DS_Store
+
 # VSCode settings
-.vscode
+.vscode
+