Update release workflow to support npm trusted publshing (#23)

Author: nex3

.eslintignore

@@ -47,7 +47,6 @@ jobs:
 
   deploy:
     name: Deploy
-    runs-on: ubuntu-latest
     if: "startsWith(github.ref, 'refs/tags/') && github.repository == 'sass/sync-child-process'"
     needs: [static_analysis, tests]
     permissions:

.eslintrc

@@ -21,6 +21,4 @@ jobs:
 
       - run: npm install
       - run: npm run compile
-      - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: '${{ secrets.NPM_TOKEN }}'
+      - run: npm publish --provenance

.github/workflows/ci.yml

@@ -0,0 +1,26 @@
+import { defineConfig } from 'eslint/config';
+import gts from 'gts';
+
+export default defineConfig([
+  gts,
+  {
+    rules: {
+      '@typescript-eslint/explicit-function-return-type': [
+        'error',
+        {'allowExpressions': true}
+      ],
+      'func-style': ['error', 'declaration'],
+      'prefer-const': ['error', {'destructuring': 'all'}],
+      // It would be nice to sort import declaration order as well, but that's not
+      // autofixable and it's not worth the effort of handling manually.
+      'sort-imports': ['error', {'ignoreDeclarationSort': true}],
+    },
+  },
+  {
+    ignores: [
+      'build/',
+      'dist/',
+      '**/*.js',
+    ],
+  },
+]);

.github/workflows/release.yml

@@ -30,9 +30,10 @@ function isMarkedAsUntransferable(object: unknown): boolean {
  * A child process that runs synchronously while also allowing the user to
  * interact with it before it shuts down.
  */
-export class SyncChildProcess
-  implements Iterator<StderrEvent | StdoutEvent, ExitEvent | undefined>
-{
+export class SyncChildProcess implements Iterator<
+  StderrEvent | StdoutEvent,
+  ExitEvent | undefined
+> {
   /** The port that communicates with the worker thread. */
   private readonly port: SyncMessagePort;