fix(ci): extend GITHUB_TOKEN permissions for release #1384

	name: Component Library

	on:
	push:
	branches:
	- '*'
	pull_request:
	branches:
	- '*'

	jobs:
	build:
	if: github.ref != 'refs/heads/main'
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-node@v4
	with:
	node-version: 24
	- name: Install dependencies
	uses: bahmutov/npm-install@v1
	- name: Run linter
	run: npm run lint
	- name: Run build
	run: npm run build
	- name: Run tests
	run: npm run test

	release:
	if: github.ref == 'refs/heads/main'
	runs-on: ubuntu-latest
	permissions:
	contents: write # to be able to publish a GitHub release
	issues: write # to be able to comment on released issues
	pull-requests: write # to be able to comment on released pull requests
	id-token: write # to enable use of OIDC for trusted publishing and npm provenance
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-node@v4
	with:
	node-version: 24
	- name: Install dependencies
	uses: bahmutov/npm-install@v1
	- name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
	run: npm audit signatures
	- name: Run build
	run: npm run build
	- name: Release
	run: npx semantic-release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	merge-main:
	if: github.ref == 'refs/heads/main'
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Merge main -> next
	uses: devmasx/merge-branch@v1.3.1
	with:
	type: now
	target_branch: next
	github_token: ${{ github.token }}

Provide feedback