build(ci): add permissions

[poolifier.git] / .github / workflows / npmpublish.yml

diff --git a/.github/workflows/npmpublish.yml b/.github/workflows/npmpublish.yml
index 1b6824797ed8522c35ae787b3ea4902a49422dc8..2782b5b94a17991c42d9292421b2f83b314decad 100644 (file)
--- a/.github/workflows/npmpublish.yml
+++ b/.github/workflows/npmpublish.yml
@@ -10,7 +10,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v2
@@ -24,7 +24,7 @@ jobs:
           cache: 'pnpm'
 
       - name: Install
-        run: pnpm install
+        run: pnpm install --ignore-scripts
 
       - name: Tests & Coverage
         run: |
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v2
@@ -62,7 +62,7 @@ jobs:
         uses: jaywcjlove/github-action-package@main
 
       - name: Install
-        run: pnpm install
+        run: pnpm install --ignore-scripts
 
       - name: Publish Release
         if: ${{ contains(steps.package-version.outputs.version, '-') == false }}
@@ -71,7 +71,7 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Publish Pre-Release
-        if: ${{ contains(steps.package-version.outputs.version, '-') == true }}
+        if: ${{ contains(steps.package-version.outputs.version, '-') == true && contains(steps.package-version.outputs.version, '-beta') == false }}
         run: pnpm publish --no-git-checks --tag next
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}