Merge pull request #1282 from ember-cli/release-preview #56

	# For every push to the primary branch with .release-plan.json modified,
	# runs release-plan.

	name: Publish Stable

	on:
	workflow_dispatch:
	push:
	branches:
	- main
	- master
	paths:
	- '.release-plan.json'

	concurrency:
	group: publish-${{ github.head_ref \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	publish:
	name: 'NPM Publish'
	runs-on: ubuntu-latest
	permissions:
	contents: write
	pull-requests: write
	id-token: write
	attestations: write

	steps:
	- uses: actions/checkout@v4
	- uses: pnpm/action-setup@v4
	- uses: actions/setup-node@v4
	with:
	node-version: 20
	# This creates an .npmrc that reads the NODE_AUTH_TOKEN environment variable
	registry-url: 'https://registry.npmjs.org'
	cache: pnpm
	- run: pnpm install --frozen-lockfile
	- run: npm install -g npm@latest # we are doing this to make sure theat the gloabally installed npm is new enough to support OIDC
	- name: Publish to NPM
	run: NPM_CONFIG_PROVENANCE=true pnpm release-plan publish
	env:
	GITHUB_AUTH: ${{ secrets.GITHUB_TOKEN }}

Provide feedback