ci: inject secrets to npmrc on publish

Author: antongolub

.github/workflows/dev-publish.yaml

@@ -12,11 +12,19 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           registry-url: 'https://registry.npmjs.org'
-      - run: npm i
-      - run: npm run build
-      - run: npm version $(node --eval="process.stdout.write(require('./package.json').version)")-dev.$(git rev-parse --short HEAD) --no-git-tag-version
-      - run: npm publish --no-git-tag-version --tag dev
+
+      - name: install
+        run: npm i
+
+      - name: build
+        run: npm run build
+
+      - name: publish
+      - run: |
+          echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" >> .npmrc
+          npm version $(node --eval="process.stdout.write(require('./package.json').version)")-dev.$(git rev-parse --short HEAD) --no-git-tag-version
+          npm publish --provenance --access=public --no-git-tag-version --tag dev
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.gitignore

@@ -3,3 +3,11 @@ node_modules/
 coverage/
 yarn.lock
 src/playground.ts
+
+# Credentials
+**/*.asc
+**/*.key
+**/*.pem
+**/*.cert
+**/.npmrc
+**/.yarnrc