.gitea/workflows/release.yaml

@@ -1,8 +1,6 @@
 name: Release
 on:
   push:
-    branches:
-      - main
 
 env:
   GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}

action.yml

@@ -7,10 +7,6 @@ inputs:
   GITEA_TOKEN:
     description: "Gitea token"
     required: true
-  NPM_TOKEN:
-    description: "NPM Publish token"
-    required: false
-    default: ""
 
 runs:
   using: "composite"
@@ -24,16 +20,12 @@ runs:
       with:
         node-version: "lts/*"
     - name: Install dependencies
-      run: npm install semantic-release @saithodev/semantic-release-gitea @semantic-release/changelog @semantic-release/release-notes-generator commitlint-plugin-cleanfeet conventional-changelog-conventionalcommits @semantic-release/git
+      run: npm install semantic-release @saithodev/semantic-release-gitea @semantic-release/changelog
+    - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+      run: npm audit signatures
     - name: Release
       env:
         GITHUB_TOKEN: ${{ inputs.GITHUB_TOKEN }}
         GITEA_TOKEN: ${{ inputs.GITEA_TOKEN }}
-        NPM_TOKEN: ${{ inputs.NPM_TOKEN }}
+      run: npx semantic-release
-      uses: cycjimmy/semantic-release-action@v4
-      id: semantic
 
-outputs:
-  new_release_published:
-    description: "The output from the action"
-    value: ${{ steps.semantic.outputs.new_release_published }}