Fix chg event and add suggestions to security #40

	name: Build and Release

	on:
	# Run on any branch push
	push:
	branches:
	- '**'

	jobs:
	build:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	cache: 'npm'

	- name: Install dependencies
	run: npm ci

	#- name: Lint --- Disabled pending move to ESLINT 9+
	# run: npm run lint

	- name: Build
	run: npm run package

	- name: Increase Version
	id: update_version
	run: \|
	npm version patch --no-git-tag-version
	NEXT_VERSION=$(node -p "require('./package.json').version")
	echo "VERSION=$NEXT_VERSION" >> $GITHUB_OUTPUT

	- name: Create VSIX
	run: npm run vscode:package

	# Upload artifact for all branches
	- name: Upload Extension Artifact
	uses: actions/upload-artifact@v4
	with:
	name: gleece-extension-${{ github.sha }}
	path: "*.vsix"
	retention-days: 5 # Keep artifacts for 5 days

	- name: Commit and push version
	if: github.ref == 'refs/heads/main'
	uses: devops-infra/action-commit-push@master
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}
	commit_message: Update to version ${{ steps.update_version.outputs.VERSION }} [skip-ci]

	- name: Create Release
	if: github.ref == 'refs/heads/main'
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	uses: softprops/action-gh-release@v2
	with:
	files: "*.vsix"
	tag_name: v${{ steps.update_version.outputs.VERSION }}
	name: Release v${{ steps.update_version.outputs.VERSION }}
	generate_release_notes: true

Provide feedback