Minimalist Knowledge Base MCP

name: Publish Package on: push: tags: - 'v*.*.*' release: types: [created] jobs: publish: runs-on: ubuntu-latest permissions: contents: read id-token: write steps: - uses: actions/checkout@v4 - name: Setup pnpm uses: pnpm/action-setup@v4 with: version: 10.14.0 - name: Setup Node.js uses: actions/setup-node@v4 with: node-version: '22.x' registry-url: 'https://registry.npmjs.org/' cache: 'pnpm' - name: Install dependencies run: pnpm install --frozen-lockfile - name: Build run: pnpm run build - name: Update npm for trusted publishing run: npm install -g npm@latest - name: Verify package info run: | echo "Package: $(node -p "require('./package.json').name")" echo "Version: $(node -p "require('./package.json').version")" - name: Publish to npm # CI checkouts of tags often leave Git in a detached HEAD state; # pnpm's default git-checks will fail if publish-branch is set. # Use --no-git-checks when publishing from a tag in CI. # Trusted publishing handles authentication via OIDC - no token needed # Provenance is generated automatically with trusted publishing run: npm publish --access public