NPM publication with semantic release on bitbucket pipelines

bitbucket-pipelines.yml

# stable as of today
image: node:fermium

definitions:
  steps:
    - step: &test
      name: Run tests
      caches:
        - node
      script:
        # Install dependencies
        - yarn install --frozen-lockfile
        # Run tests
        - yarn run test
    - step: &audit
      name: Audit dependencies
      caches:
        - node
      script:
        # Install dependencies
        - yarn install --frozen-lockfile
        # Run audit, you may consider using services such as https://snyk.io/
        - yarn audit
    - step: &release
      name: Release a new version
      caches:
        - node
      script:
        # Worth reading: https://confluence.atlassian.com/bitbucket/push-back-to-your-repository-962352710.html
        # Install dependencies
        - yarn install --frozen-lockfile
        # Trigger the release
        - yarn semantic-release

branches:
  # By default, test and audit
  default:
    - parallel:
        - step: *test
        - step: *audit

  # custom pipelines can be scheduled: for instance to audit on a given frequency
  custom:
    audit:
      - step: *audit

  # Trigger releases from master branch (if both test and audit steps pass)
  master:
    - parallel:
        - step: *test
        - step: *audit
    - step: *release