chore(ci): add a release workflow

Author: art049

.github/workflows/release.yml

@@ -0,0 +1,43 @@
+name: Release on tag
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  id-token: write
+  contents: write
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: pnpm/action-setup@v2
+      - uses: actions/setup-node@v3
+        with:
+          cache: pnpm
+          node-version-file: .nvmrc
+          registry-url: "https://registry.npmjs.org"
+      - run: pnpm install --frozen-lockfile --prefer-offline
+      - run: sudo apt-get install -y valgrind
+
+      - name: Build the libraries
+        run: pnpm moon run :build
+
+      - name: Publish the libraries
+        run: pnpm publish -r --access=public --no-git-checks
+        env:
+          NPM_CONFIG_PROVENANCE: true
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Create a draft release
+        run: |
+          NEW_VERSION=$(pnpm lerna list --json | jq -r '.[] | select(.name == "@codspeed/core") | .version')
+          gh release create v$NEW_VERSION --title "v$NEW_VERSION" --generate-notes -d
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

scripts/release.sh

@@ -2,6 +2,12 @@
 # Usage: ./scripts/release.sh <major|minor|patch>
 set -ex
 
+# Fail if not on main
+if [ "$(git rev-parse --abbrev-ref HEAD)" != "main" ]; then
+  echo "Not on default branch"
+  exit 1
+fi
+
 if [ $# -ne 1 ]; then
   echo "Usage: ./release.sh <major|minor|patch>"
   exit 1
@@ -10,8 +16,4 @@ fi
 # Fail if there are any unstaged changes left
 git diff --exit-code
 
-pnpm lerna version $1 -y --force-publish --no-private
-pnpm moon run :build
-pnpm publish -r --access=public
-NEW_VERSION=$(pnpm lerna list --json | jq -r '.[] | select(.name == "@codspeed/core") | .version')
-gh release create v$NEW_VERSION --title "v$NEW_VERSION" --generate-notes -d
+pnpm lerna version $1 --force-publish --no-private