ci: refactor release workflow and add package validation

AstroAir · AstroAir · commit b2623530e3e5 · 2026-02-14T09:39:28.000+08:00
## Changes
- ci: Remove release job from ci.yml workflow
- ci: Split release.yml into validate and publish jobs
- ci: Add validate job with lint, typecheck, test, build, publint, and size checks
- ci: Add publish-gpr job for GitHub Packages publishing
- ci: Update Node.js version from 20 to 22
- ci: Add id-token write permission for npm provenance
- ci: Add --provenance and --access public flags to npm publish
- package: Add publint, size-
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -39,31 +39,3 @@ jobs:
 
       - name: Build
         run: pnpm build
-
-  release:
-    needs: ci
-    runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: pnpm/action-setup@v4
-
-      - name: Use Node.js 20
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache: pnpm
-          registry-url: https://registry.npmjs.org
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Build
-        run: pnpm build
-
-      - name: Publish to npm
-        run: pnpm publish --no-git-checks
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,22 +7,58 @@ on:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
-  release:
+  validate:
     runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+
+      - name: Use Node.js 22
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
 
+      - name: Lint
+        run: pnpm lint
+
+      - name: Type check
+        run: pnpm typecheck
+
+      - name: Test
+        run: pnpm test
+
+      - name: Build
+        run: pnpm build
+
+      - name: Validate package
+        run: pnpm publint
+
+      - name: Check bundle size
+        run: pnpm size
+
+  publish:
+    needs: validate
+    runs-on: ubuntu-latest
+    environment: npm
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - uses: pnpm/action-setup@v4
 
-      - name: Use Node.js 20
+      - name: Use Node.js 22
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: pnpm
           registry-url: https://registry.npmjs.org
 
@@ -32,15 +68,42 @@ jobs:
       - name: Build
         run: pnpm build
 
-      - name: Test
-        run: pnpm test
-
       - name: Publish to npm
-        run: pnpm publish --no-git-checks
+        run: pnpm publish --no-git-checks --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Generate release notes
         uses: softprops/action-gh-release@v2
         with:
           generate_release_notes: true
+
+  publish-gpr:
+    needs: validate
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+
+      - name: Use Node.js 22
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+          registry-url: https://npm.pkg.github.com
+          scope: '@elementastro'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build
+        run: pnpm build
+
+      - name: Publish to GitHub Packages
+        run: pnpm publish --no-git-checks --registry https://npm.pkg.github.com
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.npmrc b/.npmrc
@@ -1,3 +1,9 @@
 shamefully-hoist=false
 strict-peer-dependencies=false
 auto-install-peers=true
+
+# Publish registry
+registry=https://registry.npmjs.org/
+
+# GitHub Packages (uncomment to use as default publish target)
+# @elementastro:registry=https://npm.pkg.github.com
diff --git a/package.json b/package.json
@@ -30,15 +30,26 @@
     "test:coverage": "vitest run --coverage",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
-    "clean": "rm -rf dist docs/.vitepress/dist docs/.vitepress/cache coverage",
+    "clean": "node -e \"const fs=require('fs');['dist','docs/.vitepress/dist','docs/.vitepress/cache','coverage'].forEach(d=>{fs.rmSync(d,{recursive:true,force:true})})\"",
     "format": "prettier --write \"src/**/*.ts\"",
     "format:check": "prettier --check \"src/**/*.ts\"",
     "typecheck": "tsc --noEmit",
     "docs:dev": "vitepress dev docs",
     "docs:build": "vitepress build docs",
     "docs:preview": "vitepress preview docs",
     "prepare": "husky",
-    "prepublishOnly": "pnpm run build",
+    "prepublishOnly": "pnpm run build && pnpm run publint",
+    "prepack": "pnpm run clean && pnpm run build",
+    "publint": "publint",
+    "pack:check": "pnpm pack && node -e \"require('fs').unlinkSync(require('./package.json').name+'-'+require('./package.json').version+'.tgz')\"",
+    "size": "size-limit",
+    "size:analyze": "size-limit --why",
+    "release:patch": "pnpm version patch && git push --follow-tags",
+    "release:minor": "pnpm version minor && git push --follow-tags",
+    "release:major": "pnpm version major && git push --follow-tags",
+    "publish:dry": "pnpm publish --dry-run --no-git-checks",
+    "publish:npm": "pnpm publish --no-git-checks --access public",
+    "publish:gpr": "pnpm publish --no-git-checks --registry https://npm.pkg.github.com",
     "demo": "tsx demo/index.ts",
     "demo:web": "pnpm run build && pnpm dlx serve ."
   },
@@ -55,16 +66,30 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/ElementAstro/fitsjs-ng.git"
+    "url": "git+https://github.com/ElementAstro/fitsjs-ng.git"
   },
   "homepage": "https://github.com/ElementAstro/fitsjs-ng#readme",
   "bugs": {
     "url": "https://github.com/ElementAstro/fitsjs-ng/issues"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
   "engines": {
     "node": ">=18"
   },
   "packageManager": "pnpm@9.15.4",
+  "size-limit": [
+    {
+      "path": "dist/index.js",
+      "limit": "25 kB"
+    },
+    {
+      "path": "dist/index.cjs",
+      "limit": "25 kB"
+    }
+  ],
   "devDependencies": {
     "@commitlint/cli": "^20.4.1",
     "@commitlint/config-conventional": "^20.4.1",
@@ -73,7 +98,10 @@
     "eslint": "^9.0.0",
     "husky": "^9.1.7",
     "lint-staged": "^16.2.7",
+    "@size-limit/preset-small-lib": "^11.2.0",
     "prettier": "^3.8.1",
+    "publint": "^0.3.12",
+    "size-limit": "^11.2.0",
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
     "typescript": "^5.9.3",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
