ci: add test job and reorder release workflow

- Add tests job that runs before build to ensure code quality
- Move publish-npm job to run before release creation
- Update GitHub Actions versions (checkout@v6.0.1, setup-go@v6.1.0, setup-node@v6.1.0, download-artifact@v7.0.0)
- Upgrade Go version from 1.21 to 1.24.5
- Update job dependencies to reflect new execution order (build needs tests, publish-npm needs build, release needs publish-npm)

Author: Flussen

.github/workflows/release.yml

@@ -10,8 +10,23 @@ permissions:
   id-token: write
 
 jobs:
+  tests:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6.0.1
+
+      - name: Set up Go
+        uses: actions/setup-go@v6.1.0
+        with:
+          go-version: "1.24.5"
+
+      - name: Run tests
+        run: go test ./...
+
   build:
     name: Build binaries
+    needs: tests
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -35,12 +50,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.1
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6.1.0
         with:
-          go-version: "1.21"
+          go-version: "1.24.5"
 
       - name: Get dependencies
         run: go mod download
@@ -59,16 +74,41 @@ jobs:
           name: ${{ matrix.artifact_name }}
           path: ${{ matrix.artifact_name }}
 
+  publish-npm:
+    name: Publish to NPM
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6.0.1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6.1.0
+        with:
+          node-version: "22"
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Update package version
+        working-directory: ./npm
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/v}
+          npm version $VERSION --no-git-tag-version --allow-same-version
+
+      - name: Publish to NPM
+        working-directory: ./npm
+        run: npm publish --access public
+
+
   release:
     name: Create Release
-    needs: build
+    needs: publish-npm
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.1
 
       - name: Download all artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7.0.0
         with:
           path: ./artifacts
 
@@ -86,28 +126,4 @@ jobs:
           prerelease: false
           body_path: RELEASE.md
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  publish-npm:
-    name: Publish to NPM
-    needs: release
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          registry-url: "https://registry.npmjs.org"
-
-      - name: Update package version
-        working-directory: ./npm
-        run: |
-          VERSION=${GITHUB_REF#refs/tags/v}
-          npm version $VERSION --no-git-tag-version --allow-same-version
-
-      - name: Publish to NPM
-        working-directory: ./npm
-        run: npm publish --access public
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

RELEASE.md

@@ -13,6 +13,8 @@
 - Removed duplicated validation and prompt logic across create flows
 - Eliminated inconsistent success messages between feature, resource, and standalone creation
 - Test `resource_builder_test` fixed, to add dependencies
+- CI: fix in push with `Trusted Publisher` and tests added
+- Updated all CI actions
 
 ### Notes
 - No breaking changes