v3.1.0 #51
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish to npm on release | |
| on: | |
| release: | |
| types: [published] | |
| workflow_dispatch: | |
| jobs: | |
| build-and-publish: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| id-token: write | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| fetch-tags: true | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: 20 | |
| registry-url: https://registry.npmjs.org/ | |
| cache: npm | |
| - name: Sync package.json version from release tag | |
| if: github.event_name == 'release' | |
| run: | | |
| TAG="${{ github.event.release.tag_name }}" | |
| VERSION="${TAG#v}" | |
| echo "Setting package.json version to $VERSION (from tag $TAG)" | |
| npm version "$VERSION" --no-git-tag-version --allow-same-version | |
| - name: Verify package.json version matches release tag | |
| if: github.event_name == 'release' | |
| run: npm run verify:release-version | |
| - name: Assert ref is a tag (release only) | |
| if: github.event_name == 'release' | |
| run: | | |
| echo "GITHUB_REF=$GITHUB_REF" | |
| case "$GITHUB_REF" in | |
| refs/tags/*) echo "ok" ;; | |
| *) echo "Expected refs/tags/* for release publish" >&2; exit 1 ;; | |
| esac | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Typecheck | |
| run: npm run typecheck | |
| - name: Build | |
| run: npm run build | |
| - name: Test | |
| run: npm test | |
| - name: Publish | |
| env: | |
| NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| NPM_CONFIG_PROVENANCE_SOURCE_REPOSITORY: https://github.com/${{ github.repository }} | |
| NPM_CONFIG_PROVENANCE_SOURCE_REPOSITORY_REF: ${{ github.ref }} | |
| NPM_CONFIG_PROVENANCE_SOURCE_REPOSITORY_COMMIT: ${{ github.sha }} | |
| NPM_CONFIG_PROVENANCE_SOURCE_REPOSITORY_URL: https://github.com/${{ github.repository }} | |
| run: npm publish --access public --provenance | |
| - name: Commit synced version back to repository | |
| if: github.event_name == 'release' | |
| env: | |
| TARGET_BRANCH: ${{ github.event.release.target_commitish }} | |
| DEFAULT_BRANCH: ${{ github.event.repository.default_branch }} | |
| run: | | |
| if git diff --quiet -- package.json package-lock.json; then | |
| echo "No package version file changes to commit." | |
| exit 0 | |
| fi | |
| TAG="${{ github.event.release.tag_name }}" | |
| VERSION="${TAG#v}" | |
| BRANCH="${TARGET_BRANCH:-$DEFAULT_BRANCH}" | |
| if ! git ls-remote --exit-code --heads origin "$BRANCH" >/dev/null 2>&1; then | |
| echo "Target '$BRANCH' is not a remote branch; falling back to '$DEFAULT_BRANCH'." | |
| BRANCH="$DEFAULT_BRANCH" | |
| fi | |
| echo "Committing synced package version to branch '$BRANCH'" | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git add package.json package-lock.json | |
| git commit -m "chore(release): sync package version to ${VERSION}" | |
| git fetch origin "$BRANCH" | |
| git rebase "origin/$BRANCH" | |
| git push origin HEAD:"$BRANCH" | |
| - name: Verify committed sync reached remote branch | |
| if: github.event_name == 'release' | |
| env: | |
| TARGET_BRANCH: ${{ github.event.release.target_commitish }} | |
| DEFAULT_BRANCH: ${{ github.event.repository.default_branch }} | |
| run: | | |
| BRANCH="${TARGET_BRANCH:-$DEFAULT_BRANCH}" | |
| if ! git ls-remote --exit-code --heads origin "$BRANCH" >/dev/null 2>&1; then | |
| BRANCH="$DEFAULT_BRANCH" | |
| fi | |
| TAG="${{ github.event.release.tag_name }}" | |
| VERSION="${TAG#v}" | |
| git fetch origin "$BRANCH" | |
| REMOTE_VERSION="$(git show "origin/$BRANCH:package.json" | node -e "process.stdin.setEncoding('utf8'); let d=''; process.stdin.on('data', c => d += c); process.stdin.on('end', () => console.log(JSON.parse(d).version || ''));")" | |
| if [ "$REMOTE_VERSION" != "$VERSION" ]; then | |
| echo "Remote branch $BRANCH package.json version is '$REMOTE_VERSION', expected '$VERSION'" >&2 | |
| exit 1 | |
| fi | |
| echo "Remote branch $BRANCH package.json version matches release tag $TAG" |