更新 CI 工作流：semantic-release-action

.github/workflows/ci.yaml

@@ -11,7 +11,6 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@main
       - uses: yanhao98/composite-actions/setup-node-environment@main
       - run: pnpm test
       - name: "Memory test"

.github/workflows/release-and-publish.yaml

@@ -0,0 +1,19 @@
+name: Release and publish
+on:
+  push:
+    branches:
+      - main
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:           # Job-level permissions configuration starts here
+      id-token: write      # npm provenance requires this permission
+      contents: write      # to be able to publish a GitHub release
+      issues: write        # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+    steps:
+      - uses: yanhao98/composite-actions/setup-node-environment@main
+      - uses: yanhao98/semantic-release-action@main
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.releaserc.yaml

@@ -0,0 +1,20 @@
+---
+plugins:
+  - "@semantic-release/commit-analyzer"
+  - "@semantic-release/release-notes-generator"
+  - "@semantic-release/changelog"
+  # #############################
+  # https://github.com/semantic-release/npm?tab=readme-ov-file#environment-variables
+  # #############################
+  - - "@semantic-release/npm"
+    # [provenance](https://docs.npmjs.com/generating-provenance-statements#using-third-party-package-publishing-tools)
+    - npmPublish: true
+  # #############################
+  # https://github.com/semantic-release/github?tab=readme-ov-file#configuration
+  # #############################
+  - "@semantic-release/github"
+  - - "@semantic-release/git"
+    - message: |-
+        chore(release): ${nextRelease.version} [skip ci]
+
+        ${nextRelease.notes}

package.json

@@ -40,5 +40,8 @@
     "tsup": "^8.3.5",
     "typescript": "^5.6.3",
     "vitest": "^2.1.3"
-  }
+  },
+	"publishConfig": {
+		"provenance": true
+	}
 }