refactor: publish to the release branch

.github/workflows/publish.yml

@@ -0,0 +1,67 @@
+name: Publish
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions: {}
+
+concurrency:
+  group: publish
+
+jobs:
+  publish:
+    name: Publish
+    runs-on: ubuntu-slim
+    environment: release-branch
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+
+      - name: Setup PNPM
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+
+      - name: Setup Node.js
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
+        with:
+          node-version-file: '.node-version'
+          cache: 'pnpm'
+
+      - name: Install Dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build and place publishable artifacts
+        run: pnpm dist
+
+      - name: Publish to release branch
+        env:
+          BRANCH: release
+          SHA: ${{ github.sha }}
+          GIT_USER_NAME: ${{ github.actor }}
+          GIT_USER_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+          WORKFLOW_FILES: repository-check.yml
+          ACTION_DIRS: |
+            get-changed-files
+            pr-filter
+            send-teams-notification
+            validate-sbom
+            verify-version-change
+            install-internal-package
+            lgtm
+            validate-lock-files
+            validate-node-versions
+            pnpm-audit
+          TAGS: |
+            get-changed-files
+            pr-filter
+            send-teams-notification
+            validate-sbom
+            verify-version-change
+            install-internal-package
+            lgtm
+            repository-check
+        run: ./scripts/publish-actions.sh

.gitignore

@@ -13,4 +13,17 @@ pnpm-debug.log*
 *.tgz
 .env
 
-*/lib/
+**/lib/
+
+# Published action output
+/get-changed-files/
+/pr-filter/
+/send-teams-notification/
+/validate-sbom/
+/verify-version-change/
+/install-internal-package/
+/lgtm/
+/validate-lock-files/
+/validate-node-versions/
+/pnpm-audit/
+/repository-check.yml