feat(cloudsmith): add CI and switch to Cloudsmith for installs

.github/dependabot.yml

@@ -0,0 +1,21 @@
+version: 2
+registries:
+  cloudsmith-npm:
+    type: npm-registry
+    url: https://npm.artifacts.hyland.dev/cic-unified-shared-libs/
+    namespace: hyland
+    service-slug: learningmachine-dependabot
+    audience: https://www.github.com/learningmachine
+
+updates:
+  - package-ecosystem: npm
+    directory: '/'
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: 'fix'
+      include: 'scope'
+      prefix-development: 'chore'
+    registries:
+      - cloudsmith-npm

.github/workflows/ci.yml

@@ -0,0 +1,55 @@
+name: CI
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+  workflow_dispatch:  # allows manual trigger from GitHub Actions tab
+
+permissions:
+  id-token: write
+  contents: write
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: "npm"
+
+      - name: Set Cloudsmith OIDC service slug
+        run: |
+            REPOSITORY_NAME="$(echo $GITHUB_REPOSITORY | tr '[:upper:]' '[:lower:]' | tr '/.' '-' )"
+            echo "CLOUDSMITH_OIDC_SERVICE_SLUG=${REPOSITORY_NAME}" >> "$GITHUB_ENV"
+
+      - name: Authenticate with Cloudsmith
+        uses: cloudsmith-io/cloudsmith-cli-action@ad73fafb92e3e29a5166c529464c2df7658a608e #v3.1.0
+        with:
+          oidc-namespace: ${{ vars.CLOUDSMITH_NAMESPACE }}
+          oidc-service-slug: ${{ env.CLOUDSMITH_OIDC_SERVICE_SLUG }}
+          export-auth-token: "true"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build --if-present
+
+      - name: Semantic Release
+        uses: cycjimmy/semantic-release-action@v6
+        with:
+          branches: |
+            [
+                '+([0-9])?(.{+([0-9]),x}).x',
+                'master'
+            ]

.npmrc

@@ -1 +1,2 @@
-//registry.npmjs.org/:_authToken=${NPM_TOKEN}
+registry=https://npm.artifacts.hyland.dev/cic-unified-shared-libs/
+//npm.artifacts.hyland.dev/cic-unified-shared-libs/:_authToken=${CLOUDSMITH_API_KEY}