v2.1.1 #25

	name: Release to npm

	on:
	release:
	types: [published]

	permissions:
	contents: read

	jobs:
	publish:
	name: Publish package
	runs-on: ubuntu-latest
	permissions:
	contents: read
	id-token: write

	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Setup pnpm
	uses: pnpm/action-setup@v4

	- name: Use Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 20
	registry-url: 'https://registry.npmjs.org'
	always-auth: true
	cache: 'pnpm'

	- name: Install
	run: pnpm install --frozen-lockfile

	- name: Test
	run: pnpm test

	- name: Build
	run: pnpm run build

	- name: Verify tag matches package.json version
	run: \|
	PKG_VERSION=$(node -p "require('./package.json').version")
	RAW_TAG="${{ github.event.release.tag_name }}"
	TAG_VERSION="${RAW_TAG#v}"
	echo "package.json: $PKG_VERSION \| tag: $RAW_TAG (-> $TAG_VERSION)"
	if [ "$PKG_VERSION" != "$TAG_VERSION" ]; then
	echo "❌ Tag and package.json version mismatch"
	exit 1
	fi

	- name: Publish to npm
	run: npm publish --provenance --access public
	env:
	NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

Provide feedback