Update workflows

Author: Sujaykumar Hublikar

.github/workflows/codeql.yml

@@ -0,0 +1,40 @@
+# CodeQL
+# .github/workflows/codeql.yml
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ main ]
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+        
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+        
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+      
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.github/workflows/publish.yml

@@ -1,16 +1,10 @@
-# Publish resources
-name: "🚀 publish"
+# Build and Publish resources
+# .github/workflows/publish.yml
+name: "Build & Publish package"
 
 on:
-  push:
-    # branches:
-    #   - main
-    tags:
-      - "v*"
-    paths:
-      - 'package.json'
-      - 'package-lock.json'
-      - 'src'
+  release:
+    types: [created]
 
 jobs:
 
@@ -36,49 +30,56 @@ jobs:
       # Install npm packages
       - run: npm install
 
-      # dist setup
-      - run: rm -rf dist/.git* # delete .git* files
+      # Setup env
       - run: echo ${{ env.RELEASE_VERSION }} >> Release.txt
-      - run: mv LICENSE LICENSE.txt
       - run: sed -i -e 's/REL_VER_NUMBER/${{ env.RELEASE_VERSION }}/g' src/plugin.js
 
-      # Build dist
-      - run: npm run all
+      # dist setup
+      - run: rm -rf dist/.git* # delete .git* files in dist
+      - run: echo ARCHIVE="docsify-plugin-title-${{ env.RELEASE_VERSION }}.zip" >> $GITHUB_ENV
+      - run: mv LICENSE LICENSE.txt
+
+        # Build for dist
+      - run: npm run minify
 
       # Publish to npm
-      - name: "📦 publish to npm"
+      - name: "🚀 Publish to npm"
         uses: JS-DevTools/npm-publish@v1
         with:
           token: ${{ secrets.NPM_TOKEN }}
           access: "public"
           check-version: true
 
       # Publish to github npm
-      - name: "📦 publish to github npm"
+      - name: "🚀 Publish to github npm"
         uses: JS-DevTools/npm-publish@v1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           access: "public"
           registry: "https://npm.pkg.github.com"
           check-version: true
 
-      # publish release
-      - uses: papeloto/action-zip@v1
-        with:
-          files: dist/plugin.js dist/plugin.min.js src/plugin.js package.json README.md LICENSE.txt
-          recursive: false
-          dest: dist.zip
-      - run: sha256sum dist.zip >> dist.zip.sha256
-      - run: md5sum dist.zip >> dist.zip.md5
-
-      - name: "📦 Github Release"
-        uses: "marvinpinto/action-automatic-releases@latest"
-        if: startsWith(github.ref, 'refs/tags/')
+      # package for release
+      - name: "📦 zipping files"
+        run: |
+          zip -r ${{ env.ARCHIVE }} ./src ./dist LICENSE* package* README.md
+
+          unzip -l ${{ env.ARCHIVE }}
+
+      - run: sha256sum ${{ env.ARCHIVE }} >> ${{ env.ARCHIVE }}.sha256
+      - run: md5sum ${{ env.ARCHIVE }} >> ${{ env.ARCHIVE }}.md5
+
+      # Publish release
+      - name: 🚀 Publish to Github Release
+        uses: softprops/action-gh-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          repo_token: "${{ secrets.GITHUB_TOKEN }}"
-          automatic_release_tag: "${{ env.RELEASE_VERSION }}"
           prerelease: false
+          draft: false
+          name: ${{ env.RELEASE_VERSION }}
+          tag_name: ${{ env.RELEASE_VERSION }}
           files: |
-            dist.zip
-            dist.zip.sha256
-            dist.zip.md5
+            ${{ env.ARCHIVE }}
+            ${{ env.ARCHIVE }}.sha256
+            ${{ env.ARCHIVE }}.md5