Merge pull request #2386 from embroider-build/release-preview #300

	# For every push to the primary branch with .release-plan.json modified,
	# runs release-plan.

	name: Publish Stable

	on:
	workflow_dispatch:
	push:
	branches:
	- main
	- master
	paths:
	- '.release-plan.json'

	concurrency:
	group: publish-${{ github.head_ref \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	publish:
	name: "NPM Publish"
	runs-on: ubuntu-latest
	permissions:
	contents: write
	pull-requests: write
	id-token: write
	attestations: write

	steps:
	- uses: actions/checkout@v4
	- uses: ./.github/actions/setup
	with:
	use_pinned_node: "true"
	- uses: actions/setup-node@v4
	with:
	# This creates an .npmrc that reads the NODE_AUTH_TOKEN environment variable
	registry-url: 'https://registry.npmjs.org'
	- name: Publish to NPM
	run: NPM_CONFIG_PROVENANCE=true pnpm release-plan publish
	env:
	GITHUB_AUTH: ${{ secrets.GITHUB_TOKEN }}
	NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

Provide feedback