Create codeql.yml #6

	name: Changesets
	on:
	push:
	branches: [main]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	verify:
	name: Verify
	uses: ./.github/workflows/verify.yml
	secrets: inherit

	changesets:
	name: Create pull request or publish
	needs: verify
	permissions:
	contents: write
	id-token: write
	issues: write
	repository-projects: write
	deployments: write
	packages: write
	pull-requests: write
	runs-on: ubuntu-latest
	timeout-minutes: 5

	steps:
	- name: Clone repository
	uses: actions/checkout@v4
	with:
	# This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
	fetch-depth: 0

	- name: Install dependencies
	uses: ./.github/actions/install-dependencies

	- name: Create version pull request or publish to npm
	uses: changesets/action@v1
	with:
	title: 'chore: version packages'
	commit: 'chore: version packages'
	createGithubReleases: ${{ github.ref == 'refs/heads/main' }}
	publish: pnpm changeset:publish
	version: pnpm changeset:version
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

	- name: Publish Prerelease
	if: steps.changesets.outputs.published != 'true'
	continue-on-error: true
	env:
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	npm config set "//registry.npmjs.org/:_authToken" "$NPM_TOKEN"
	git reset --hard origin/main
	pnpm clean
	pnpm changeset version --no-git-tag --snapshot canary
	pnpm changeset:prepublish
	pnpm changeset publish --no-git-tag --snapshot canary --tag canary

Provide feedback