add pkg.pr.new

.github/workflows/pkg-pr-new.yml

@@ -0,0 +1,31 @@
+name: pkg-pr-new
+
+on: pull_request
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  publish:
+    name: Publish
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - uses: ./.github/actions/ci-setup
+        with:
+          skip-cache: true # avoid cache poisoning attacks
+
+      - name: Build
+        run: pnpm build
+
+      - run:
+          | # zizmor: ignore[use-trusted-publishing] we're not publishing to npm here
+          pnpm exec pkg-pr-new publish --pnpm --packageManager=pnpm --commentWithDev --commentWithSha

package.json

@@ -42,6 +42,7 @@
     "@types/semver": "^7.5.0",
     "fs-fixture": "^2.13.0",
     "oxfmt": "^0.48.0",
+    "pkg-pr-new": "^0.0.71",
     "rolldown": "^1.0.1",
     "typescript": "^5.8.3",
     "vitest": "^4.1.6"

pnpm-lock.yaml

@@ -83,6 +83,9 @@ importers:
       oxfmt:
         specifier: ^0.48.0
         version: 0.48.0
+      pkg-pr-new:
+        specifier: ^0.0.71
+        version: 0.0.71
       rolldown:
         specifier: ^1.0.1
         version: 1.0.1
@@ -1062,6 +1065,10 @@ packages:
     resolution: {integrity: sha512-uB80kBFb/tfd68bVleG9T5GGsGPjJrLAUpR5PZIrhBnIaRTQRjqdJSsIKkOP6OAIFbj7GOrcudc5pNjZ+geV2g==}
     engines: {node: '>=6'}
 
+  pkg-pr-new@0.0.71:
+    resolution: {integrity: sha512-Ln7I7NaOXN6CjBLVrNqsWOo6mIaNW4chH4eCR2t4tnQSmYtyQiWCqlMG6bL2JYCT1MOiKEiDObnnzePGh0TNFQ==}
+    hasBin: true
+
   possible-typed-array-names@1.1.0:
     resolution: {integrity: sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==}
     engines: {node: '>= 0.4'}
@@ -2358,6 +2365,8 @@ snapshots:
 
   pify@4.0.1: {}
 
+  pkg-pr-new@0.0.71: {}
+
   possible-typed-array-names@1.1.0: {}
 
   prettier@2.8.8: {}