update release action and scripts (#18)

* update release action and scripts

* always run install on release action, unlike ci it isn't multi-job with deferred install

Author: dominikg

.github/workflows/release.yml

@@ -1,28 +1,61 @@
 name: Release
 
+env:
+  pnpm_store_path: ${{github.workspace}}/.pnpm-store
+
 on:
   push:
     branches:
       - main
 
 jobs:
   release:
+    # prevents this action from running on forks
+    if: github.repository == 'sveltejs/vite-plugin-svelte'
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout Repo
-        uses: actions/checkout@master
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 14
+
+      - name: checkout
+        uses: actions/checkout@v2
         with:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0
 
-      - name: Setup Node.js 12.x
-        uses: actions/setup-node@master
+      # install pnpm and try to reuse cache from ci action by using same cache keys
+      - name: install pnpm
+        run: npm i -g pnpm@5
+      - name: set pnpm store-dir
+        run: pnpm config set store-dir ${{ env.pnpm_store_path }}
+      - name: pnpm-store
+        uses: actions/cache@v2
+        id: pnpm-store
+        with:
+          path: ${{ env.pnpm_store_path }}
+          key: ubuntu-latest-node-v14-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+
+      - name: pnpm-store-fallback
+        if: steps.pnpm-store.outputs.cache-hit != 'true'
+        uses: actions/cache@v2
+        id: pnpm-store-fallback
         with:
-          node-version: 12.x
+          path: ${{ env.pnpm_store_path }}
+          key: ubuntu-latest-node-v14-pnpm-store-fallback-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ubuntu-latest-node-v14-pnpm-store-fallback-
+            ubuntu-latest-node-v14-pnpm-store-
 
-      - run: npm install -g pnpm
-      - run: pnpm install --frozen-lockfile
+      - name: install
+        # install but don't run scripts, they could be evil
+        run: pnpm install --frozen-lockfile --prefer-offline --ignore-scripts
+      - name: check store
+        run: pnpm store status
+      - name: install esbuild
+        # manually install esbuild because we deactivated postinstall scripts above
+        run: node node_modules/esbuild/install.js
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets

package.json

@@ -24,7 +24,7 @@
     "format:fix": "pnpm format -- --write",
     "fixup": "run-s lint:fix format:fix",
     "update-deps": "ncu -u",
-    "release": "pnpm publish --tag=next --filter=\"@sveltejs/*\""
+    "release": "pnpm run build && pnpx changeset publish"
   },
   "devDependencies": {
     "@changesets/cli": "^2.14.1",

packages/vite-plugin-svelte/package.json

@@ -12,8 +12,7 @@
     "dev": "tsc -p . -w --incremental",
     "build": "rimraf dist && run-s build-bundle build-types",
     "build-bundle": "node scripts/build-bundle.js",
-    "build-types": "tsc -p . --emitDeclarationOnly --outDir temp && api-extractor run && rimraf temp",
-    "prepublishOnly": "npm run build"
+    "build-types": "tsc -p . --emitDeclarationOnly --outDir temp && api-extractor run && rimraf temp"
   },
   "engines": {
     "node": ">=12.0.0"