changesets.yml

name: Changesets

on:
  workflow_dispatch:
  push:
    branches:
      - main

permissions:
  contents: read

jobs:
  changesets:
    name: Changesets
    runs-on: ubuntu-latest

    permissions:
      contents: write
      checks: read
      issues: read
      pull-requests: write

    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          fetch-depth: 0
          filter: blob:none
          # We clone using a deploy key so that this workflow can
          # push tags and trigger the release workflow, which GHA
          # tokens don't allow.
          ssh-key: ${{ secrets.DEPLOY_KEY }}
      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
        with:
          node-version: '*'

      - run: npm ci
        if: ${{ github.event_name != 'schedule' }}

      - run: npm run build
      - run: npm test

      - uses: changesets/action@06245a4e0a36c064a573d4150030f5ec548e4fcc # v1.4.10
        with:
          publish: npx changeset tag
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}