diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..d1b3332
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,36 @@
+name: build & publish to npm
+
+on:
+  schedule:
+    # on day-of-month 17 at 20:00
+    - cron:  '0 20 17 * *'
+
+jobs:
+  test-build-publish:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: ['16']
+
+    steps:
+    - name: checkout
+      uses: actions/checkout@v4
+    - name: setup Node v${{ matrix.node-version }}
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ matrix.node-version }}
+    - run: npm install
+
+    - run: npm run build
+    - run: npm test
+
+    - name: npm login
+      env:
+        NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
+      run: npm set "//registry.npmjs.org/:_authToken=$NPM_TOKEN"
+    - name: bump version
+      run: |
+        set -x
+        npm version --no-git-tag-version --force "$(npm exec -- semver@7 -i minor "$(npm info "$(jq -r .name package.json)" version)")"
+    - name: publish
+      run: npm publish