Use the shared publish workflow

.github/workflows/publish.yml

@@ -13,9 +13,6 @@ jobs:
   version:
     runs-on: ubuntu-latest
 
-    # OSBotify will update the version on `main`, so this check is important to prevent an infinite loop
-    if: ${{ github.actor != 'OSBotify' }}
-
     steps:
       - uses: actions/checkout@v3
         with:
@@ -27,71 +24,10 @@ jobs:
         with:
           github_token: ${{ github.token }}
 
-      - name: Decrypt & Import OSBotify GPG key
-        run: |
-          cd .github
-          gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" --output OSBotify-private-key.asc OSBotify-private-key.asc.gpg
-          gpg --import OSBotify-private-key.asc
-        env:
-          LARGE_SECRET_PASSPHRASE: ${{ secrets.LARGE_SECRET_PASSPHRASE }}
-
-      - name: Set up git for OSBotify
-        run: |
-          git config --global user.signingkey AEE1036472A782AB
-          git config --global commit.gpgsign true
-          git config --global user.name OSBotify
-          git config --global user.email infra+osbotify@expensify.com
-
-      - uses: actions/setup-node@v3
+      - uses: Expensify/GitHub-Actions/.github/workflows/npmPublish.yml@main
         with:
-          node-version: '16.x'
-          registry-url: 'https://registry.npmjs.org'
-
-      - name: Generate branch name
-        run: echo "BRANCH_NAME=OSBotify-bump-version-$(uuidgen)" >> $GITHUB_ENV
-
-      - name: Create branch for version-bump pull request
-        run: git checkout -b ${{ env.BRANCH_NAME }}
-
-      - name: Install npm packages
-        run: npm ci
-
-      - name: Update npm version
-        run: npm version patch
-
-      - name: Set new version in GitHub ENV
-        run: echo "NEW_VERSION=$(jq '.version' package.json)" >> $GITHUB_ENV
-
-      - name: Push branch and publish tags
-        run: git push --set-upstream origin ${{ env.BRANCH_NAME }} && git push --tags
-
-      - name: Create pull request
-        run: |
-          gh pr create \
-            --title "Update version to ${{ env.NEW_VERSION }}" \
-            --body "Update version to ${{ env.NEW_VERSION }}"
-          sleep 5
-        env:
-          GITHUB_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }}
-
-      - name: Auto-approve pull request
-        run: gh pr review --approve ${{ env.BRANCH_NAME }}
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-
-      - name: Auto-merge pull request
-        run: gh pr merge --merge --delete-branch ${{ env.BRANCH_NAME }}
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-
-      - name: Publish to npm
-        run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-      - name: Comment on PR
-        run: |
-          gh pr comment ${{ steps.getMergedPullRequest.outputs.number }} --body \
-            ":rocket: Published in ${{ env.NEW_VERSION }}"
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
+          repository: ${{ github.action_repository }}
+          pull_request_number: ${{ steps.getMergedPullRequest.outputs.pull_request_number }}
+        secrets:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          OS_BOTIFY_COMMIT_TOKEN: ${{ secrets.OS_BOTIFY_COMMIT_TOKEN }}