chore: update AUTHORS, THIRD-PARTY-NOTICES, Security Test Summary #2131

	name: Publish
	on:
	# NOTE: avoid using the manual execution unless is the only way to fix some issue,
	# rather retry failed jobs in case of flakes. The manual execution can potentially
	# cause the tags to point to a different commit that the one used to publish
	# the packages
	workflow_dispatch:
	push:
	branches:
	- main

	jobs:
	publish:
	if: \|
	github.event_name == 'workflow_dispatch' \|\|
	startsWith(github.event.head_commit.message, 'chore(release): bump package versions')

	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v3
	with:
	# don't checkout a detatched HEAD
	ref: ${{ github.head_ref }}

	# this is important so git log has the whole history
	fetch-depth: '0'

	- name: Setup git
	run: \|
	git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
	git config --local user.name "github-actions[bot]"

	- name: "Use Node.js 14"
	uses: actions/setup-node@v3
	with:
	node-version: 20.16.0

	- name: Install [email protected]
	run: npm install -g [email protected]

	- name: Install Dependencies
	run: \|
	npm run bootstrap-ci
	shell: bash

	- name: "Publish what is not already in NPM"
	env:
	NPM_TOKEN: ${{ secrets.DEVTOOLSBOT_NPM_TOKEN }}
	run: \|
	echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> .npmrc
	npm config list
	echo "Publishing packages as $(npm whoami)"
	git update-index --assume-unchanged .npmrc
	npm run publish-packages

	- name: "Publish tags"
	run: \|
	npx lerna list -a --json \| \
	jq -r '.[] \| .name + "@" + .version' \| \
	xargs -i sh -c "git tag -a {} -m {} \|\| true"
	git push --follow-tags

Provide feedback