feat(ci): publish tagged releases to npmjs

.gitea/workflows/package.yml

@@ -86,14 +86,21 @@ jobs:
             exit 1
           fi
 
+          if npm view "$package_name@$PACKAGE_VERSION" version --registry='https://registry.npmjs.org/' > /dev/null 2>&1; then
+            echo "npmjs package $package_name@$PACKAGE_VERSION already exists" >&2
+            exit 1
+          fi
+
       - name: Validate publish credentials
         shell: bash
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
+          NPMJS_PUBLISH_TOKEN: ${{ secrets.NPMJS_PUBLISH_TOKEN }}
           RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
         run: |
           set -euo pipefail
           : "${NODE_AUTH_TOKEN:?NPM_PUBLISH_TOKEN is required}"
+          : "${NPMJS_PUBLISH_TOKEN:?NPMJS_PUBLISH_TOKEN is required}"
           : "${RELEASE_TOKEN:?RELEASE_TOKEN is required}"
 
       - name: Type check
@@ -154,19 +161,17 @@ jobs:
           npm config set -- '//lqycustomsite.online/api/packages/admin/npm/:_authToken' "$NODE_AUTH_TOKEN"
           npm publish "./$package_file" --registry="$registry_url" --tag "$NPM_DIST_TAG"
 
-      - name: Publish component package
+      - name: Publish to npmjs.org
         shell: bash
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPMJS_PUBLISH_TOKEN }}
         run: |
           set -euo pipefail
           source release.env
-          published_name="waveform-analysis-${PACKAGE_VERSION}.tgz"
-          install -m 644 "release-assets/$published_name" "/downloads/$published_name"
-          cd /downloads
-          sha256sum "$published_name" > "$published_name.sha256"
-          if [[ "$IS_PRERELEASE" == 'false' ]]; then
-            ln -sfn "$published_name" waveform-analysis-latest.tgz
-            ln -sfn "$published_name.sha256" waveform-analysis-latest.tgz.sha256
-          fi
+          : "${NODE_AUTH_TOKEN:?NPMJS_PUBLISH_TOKEN is required}"
+          package_file="release-assets/waveform-analysis-${PACKAGE_VERSION}.tgz"
+          npm config set -- '//registry.npmjs.org/:_authToken' "$NODE_AUTH_TOKEN"
+          npm publish "./$package_file" --registry='https://registry.npmjs.org/' --tag "$NPM_DIST_TAG" --access public
 
       - name: Create Gitea release
         shell: bash

package.json

@@ -1,6 +1,6 @@
 {
   "name": "waveform-analysis",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "types": "./dist/types/index.d.ts",