Tweak publishing setup

Author: Andarist

.github/actions/ci-setup/action.yml

@@ -0,0 +1,23 @@
+name: Setup CI
+
+inputs:
+  node-version:
+    description: "Node.js version"
+    required: false
+    default: 22
+
+runs:
+  using: composite
+  steps:
+    - name: Set up pnpm
+      uses: pnpm/action-setup@91ab88e2619ed1f46221f0ba42d1492c02baf788 # v6.0.6
+
+    - name: Setup Node.js ${{ inputs.node-version }}
+      uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: pnpm
+
+    - name: Install dependencies
+      shell: bash
+      run: pnpm install

.github/workflows/publish.yml

@@ -7,33 +7,49 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions: {} # each job should define its own permission explicitly
+
 jobs:
-  publish:
-    name: Publish
-    if: github.repository == 'changesets/format'
+  version:
+    name: Version
     runs-on: ubuntu-latest
+    timeout-minutes: 20
+    outputs:
+      hasChangesets: ${{ steps.changesets.outputs.hasChangesets }}
     permissions:
       contents: write # to create release (changesets/action)
+      issues: write # to post issue comments (changesets/action)
       pull-requests: write # to create pull request (changesets/action)
-      id-token: write # to use OpenID Connect token for trusted publishing (changesets/action)
     steps:
-      - name: Check out repo
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: ./.github/actions/ci-setup
 
-      - name: Set up pnpm
-        uses: pnpm/action-setup@91ab88e2619ed1f46221f0ba42d1492c02baf788 # v6.0.6
+      - name: Create or update release pull request
+        id: changesets
+        # https://github.com/changesets/action
+        uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0
 
-      - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+  publish:
+    name: Publish
+    if: needs.version.outputs.hasChangesets == 'false'
+    needs: version
+    runs-on: ubuntu-latest
+    environment: npm
+    timeout-minutes: 20
+    permissions:
+      contents: write # to create release (changesets/action)
+      id-token: write # to use OpenID Connect token for trusted publishing (changesets/action)
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: ./.github/actions/ci-setup
         with:
           node-version: 24
-          cache: pnpm
-
-      - name: Install dependencies
-        run: pnpm install
 
       - name: Build
         run: pnpm build
 
-      - name: Create release PR or publish to npm
+      - name: Publish to npm
+        # https://github.com/changesets/action
         uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0
+        with:
+          publish: pnpm release

package.json

@@ -15,7 +15,8 @@
     "test": "vitest",
     "format": "oxfmt",
     "lint": "oxfmt --check",
-    "typecheck": "tsc"
+    "typecheck": "tsc",
+    "release": "changeset publish"
   },
   "dependencies": {
     "package-manager-detector": "^1.6.0"
@@ -30,5 +31,8 @@
     "typescript": "~6.0.3",
     "vitest": "^4.1.5"
   },
-  "packageManager": "pnpm@11.1.0"
+  "packageManager": "pnpm@11.1.0",
+  "engines": {
+    "node": "^22.11 || ^24 || >=26"
+  }
 }