v0.20.19 #7

	name: Publish Package

	on:
	release:
	types: [published] # Publishes when you publish a GitHub Release

	permissions:
	id-token: write # REQUIRED for npm trusted publishing (OIDC)
	contents: read

	jobs:
	publish:
	runs-on: ubuntu-latest

	steps:
	# 1. Checkout repo
	- uses: actions/checkout@v5

	# 2. Setup Node (OIDC-safe)
	# IMPORTANT: Do NOT set registry-url or npm token
	- uses: actions/setup-node@v5
	with:
	node-version: '22'

	# 3. Ensure modern npm (OIDC + provenance support)
	- name: Update npm to latest
	run: npm install -g npm@latest

	# 4. Install dependencies
	- name: Install dependencies
	run: npm ci

	# 5. Build UMD (Webpack)
	- name: Build UMD
	run: npm run build

	# 6. Build ESM (Rollup)
	- name: Build ESM
	run: npm run build:esm

	# 7. Verify build artifacts exist
	- name: Verify dist
	run: npm run verify:dist

	# 8. Publish to npm using GitHub trusted publishing
	- name: Publish to npm
	run: npm publish --provenance

Provide feedback