[Initiative] Automated publishing of npm packages from CI/CD

[wraithgar]

Initiative

One of the last puzzle pieces in our release process is the actual publish command. The eventual goal is publishing to npm from actions alongside all of the other release actions we currently do.

Initial implementation should be opt-in (i.e. repo-level config) driven by template-oss. OIDC or 2fa will be required. Human intervention to either kick off or allow the completion of the publish process will also be needed.

Requirements

Preview Give feedback

1. Driven by template-oss
2. Developer-driven (either to start or continue)
3. Access limited to npm-cli team
4. OIDC/2fa required (limited GAT rollout notwithstanding)
5. Opt-in per repo (via template-oss config)

Phase 1 Q3 FY23

Preview Give feedback

1. Design / RFC / ADR for Automated publishing of npm packages from CI/CD #626
   epic +1
   
2. Initial roll out to 5 repos with GAT
3. Make decision regarding Deployments

Phase 2 Q4 FY23

Preview Give feedback

1. Roll out to additional 25 repos with GAT
2. Convert GAT deployments to OIDC (dependent on OIDC launch)
3. ADR for automated publishing of npm/cli

Phase 3 Q1 FY24

Preview Give feedback

1. Roll out for npm/cli
2. Roll out for remaining non npm/CLI repos

We can then move our repos over to this process.

[saquibkhan]

OIDC - https://github.com/github/npm/issues/7261