Merge pull request #2715 from guardian/update-aws-cdk-2.1018.0 #1739

	name: CD
	on:
	push:
	branches:
	- main
	workflow_dispatch:

	jobs:
	CD:
	runs-on: ubuntu-latest

	permissions:
	contents: write
	id-token: write
	pull-requests: write

	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version-file: ".nvmrc"
	cache: npm

	- name: Install
	run: npm ci

	- name: Build
	run: npm run build

	- name: Lint
	run: npm run lint

	- name: Test
	run: npm run test

	- uses: actions/create-github-app-token@v2
	id: app-token
	with:
	app-id: ${{ vars.APP_ID }}
	private-key: ${{ secrets.PRIVATE_KEY }}

	- name: Get GitHub App User ID
	id: get-user-id
	run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
	env:
	GH_TOKEN: ${{ steps.app-token.outputs.token }}

	- name: Configure git
	run: \|
	git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
	git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com'

	- name: Create Release Pull Request or Publish to npm
	id: changesets
	uses: changesets/action@v1
	with:
	publish: npx changeset publish
	title: "🦋 Release package updates"
	commit: "Bump package version"
	setupGitUser: false
	env:
	GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

	- name: Release docs
	if: (github.ref == 'refs/heads/main')
	run: \|
	git remote set-url origin https://git:${{ steps.app-token.outputs.token }}@github.com/${{ github.repository }}.git
	npm run release:docs

Provide feedback