npmx.dev/.github/workflows/release-tag.yml at eea12a9d592b51a76e6bcbfb06fc7dc9a0758fca · npmx-dev/npmx.dev · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
name: release-tag

on:
  push:
    branches:
      - release

permissions: {}

jobs:
  tag:
    name: 🏷️ Tag release and create GitHub Release
    runs-on: ubuntu-slim
    if: github.repository == 'npmx-dev/npmx.dev'
    permissions:
      contents: write
    outputs:
      version: ${{ steps.version.outputs.next }}
      skipped: ${{ steps.check.outputs.skip }}

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0

      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: lts/*

      - name: 🔢 Determine next version
        id: version
        run: |
          VERSION_JSON=$(node scripts/next-version.ts)
          echo "current=$(echo "$VERSION_JSON" | jq -r .current)" >> "$GITHUB_OUTPUT"
          echo "next=v$(echo "$VERSION_JSON" | jq -r .next)" >> "$GITHUB_OUTPUT"
          echo "from=$(echo "$VERSION_JSON" | jq -r .from)" >> "$GITHUB_OUTPUT"
          echo "Bumping from v$(echo "$VERSION_JSON" | jq -r .current) to v$(echo "$VERSION_JSON" | jq -r .next)"

      - name: 🔍 Check if tag already exists
        id: check
        env:
          VERSION: ${{ steps.version.outputs.next }}
        run: |
          if git rev-parse "$VERSION" >/dev/null 2>&1; then
            echo "skip=true" >> "$GITHUB_OUTPUT"
            echo "Tag $VERSION already exists, skipping"
          else
            echo "skip=false" >> "$GITHUB_OUTPUT"
          fi

      - name: 🏷️ Create and push tag
        if: steps.check.outputs.skip == 'false'
        env:
          VERSION: ${{ steps.version.outputs.next }}
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git tag -a "$VERSION" -m "Release $VERSION"
          git push origin "$VERSION"

      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # 5e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        if: steps.check.outputs.skip == 'false'
        name: 🟧 Install pnpm

      - name: 📦 Install dependencies
        if: steps.check.outputs.skip == 'false'
        run: pnpm vp install --filter . --ignore-scripts

      - name: 📝 Generate release notes
        if: steps.check.outputs.skip == 'false'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          FROM_REF: ${{ steps.version.outputs.from }}
        run: node scripts/release-notes.ts "$FROM_REF" > /tmp/release-notes.md

      - name: 🚀 Create GitHub Release
        if: steps.check.outputs.skip == 'false'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          VERSION: ${{ steps.version.outputs.next }}
        run: |
          gh release create "$VERSION" \
            --notes-file /tmp/release-notes.md \
            --title "$VERSION"

  publish-connector:
    name: 📦 Publish npmx-connector to npm
    runs-on: ubuntu-slim
    needs: tag
    if: needs.tag.outputs.skipped == 'false'
    permissions:
      contents: read
      id-token: write
    environment: npm-publish

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: release

      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: lts/*
          registry-url: https://registry.npmjs.org

      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # 5e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: false

      - name: 📦 Install dependencies
        run: pnpm install --filter npmx-connector...

      - name: 🔢 Set connector version
        env:
          VERSION: ${{ needs.tag.outputs.version }}
        run: |
          # Strip the 'v' prefix for package.json
          PKG_VERSION="${VERSION#v}"
          cd cli
          npm version "$PKG_VERSION" --no-git-tag-version
          echo "Publishing npmx-connector@${PKG_VERSION}"

      - name: 🏗️ Build connector
        run: pnpm --filter npmx-connector build

      - name: 📤 Publish to npm with provenance
        # Uses OIDC trusted publishing — no NPM_TOKEN needed.
        # Configure on npmjs.com: repo npmx-dev/npmx.dev, workflow release-tag.yml, environment npm-publish
        run: npm publish --provenance --access public
        working-directory: cli