chore: uses app to bypass branch protections

Author: ruiconti

.github/workflows/publish-package.yml

@@ -11,6 +11,29 @@ permissions:
   contents: write 
 
 jobs:
+  build-and-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: "18.15"
+          cache: "yarn"
+
+      - name: Install
+        run: yarn install --frozen-lockfile --non-interactive
+
+      - name: Build
+        run: yarn build
+
+      - name: Lint
+        run: yarn lint
+
   publish:
     if: github.event.pull_request.merged == true && (contains(github.event.pull_request.labels.*.name, 'release-major') || contains(github.event.pull_request.labels.*.name, 'release-minor') || contains(github.event.pull_request.labels.*.name, 'release-patch'))
     runs-on: ubuntu-latest
@@ -32,31 +55,38 @@ jobs:
           echo "type=$VERSION_TYPE" >> $GITHUB_OUTPUT
           echo "Running a $VERSION_TYPE release"
 
-      - name: Checkout
-        uses: actions/checkout@v3
-        with:
-          ref: "main"
-          fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Setup Node
         uses: actions/setup-node@v3
         with:
           node-version: "18.15"
           cache: "yarn"
           registry-url: "https://registry.npmjs.org"
 
+      - name: Configure git access
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ secrets.JAM_GIT_PUSHER_APP_ID }}
+          private-key: ${{ secrets.JAM_GIT_PUSHER_PRIVATE_KEY }}
+
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          ref: "main"
+          fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Configure git author
+        run: |
+          git config user.name github-actions
+          git config user.email github-actions@github.com
+
       - name: Install dependencies
         run: yarn install --frozen-lockfile --non-interactive
 
       - name: Build
         run: yarn build
 
-      - name: Configure Git
-        run: |
-          git config --local user.email "action@github.com"
-          git config --local user.name "GitHub Action"
-
       - name: Tag release
         id: bump-version
         env:
@@ -71,7 +101,7 @@ jobs:
           git tag v$NEW_VERSION
           git push --tags origin main
 
-      - name: Create GitHub Release
+      - name: Create a GitHub Release
         uses: actions/create-release@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}