Jia/_/add-readme #3

	name: Changelog

	on:
	pull_request:
	branches:
	- master
	types: [opened, synchronize, edited]

	permissions:
	contents: read # for checkout

	jobs:
	release:
	name: Generate Changelog
	runs-on: ubuntu-latest
	permissions:
	contents: write # to be able to publish a GitHub release
	issues: write # to be able to comment on released issues
	pull-requests: write # to be able to comment on released pull requests
	id-token: write # to enable use of OIDC for npm provenance
	steps:
	- name: Checkout
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
	with:
	fetch-depth: 0
	- name: Setup Node.js
	uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
	with:
	node-version: '20'
	- name: Update to latest npm (temporary fix for audit below)
	run: npm install --global npm
	- name: Install dependencies
	run: npm clean-install
	- name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
	run: npm audit signatures
	- name: Generate changelog
	run: npm run generate-changelog
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Commit changelog to PR
	run: \|
	git config user.name "github-actions"
	git config user.email "[email protected]"
	git add CHANGELOG.md
	git commit -m "Update changelog for PR #${{ github.event.pull_request.number }}"
	git push
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback