Merge branch 'main' into dependabot/npm_and_yarn/libs/iota-core/npm_a…

…nd_yarn-9706462e92

.github/workflows/nx-release.yaml

@@ -20,6 +20,10 @@ jobs:
     concurrency: release
     runs-on: ubuntu-latest
     environment: main
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
+      contents: read    
     needs:
       - security
     steps:
@@ -47,13 +51,35 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
           scope: '@affinidi-tdk'
       - run: npm ci
+
       # Generate tag/changelog with semantic release
       # setting parallel higher than one might cause problems with locking git repo
       - run: npx nx run-many  -t semantic-release --parallel=false
         name: semantic release
         env:
           GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: build
+        run: |
+          npx nx run-many -t build
+
+      - name: package
+        run: |
+          npx nx run-many -t package 
+      
+      - name: Set up Python
+        uses: actions/setup-python@v3
+        with:
+          python-version: '3.x'
+
+      - name:  install twine for pypi releases
+        run: |
+          pip install twine
+
+      - name: Mint pypi token
+        id: mint
+        uses: tschm/[email protected]
 
       # Publish to npm with new nx release publish functionality
       - run: |
@@ -63,3 +89,5 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }} #publib-npm expects this 
           GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
+          TWINE_USERNAME: '__token__'
+          TWINE_PASSWORD: ${{ steps.mint.outputs.api-token }}

.gitignore

@@ -38,5 +38,5 @@ testem.log
 .DS_Store
 Thumbs.db
 
-.nx/cache
+.nx
 .vscode