Version Packages (#82) #19
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish | |
| on: | |
| push: | |
| branches: | |
| - main | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: false | |
| queue: max | |
| permissions: {} | |
| jobs: | |
| version: | |
| name: Version | |
| runs-on: ubuntu-latest | |
| environment: version | |
| timeout-minutes: 10 | |
| outputs: | |
| hasChangesets: ${{ steps.changesets.outputs.hasChangesets }} | |
| permissions: | |
| contents: write # to create version commits (changesets/action) | |
| pull-requests: write # to create pull request (changesets/action) | |
| steps: | |
| - name: Check out repo | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - uses: ./.github/actions/ci-setup | |
| with: | |
| skip-cache: true # avoid cache poisoning attacks | |
| - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 | |
| id: app-token | |
| with: | |
| client-id: ${{ vars.APP_CLIENT_ID }} | |
| private-key: ${{ secrets.APP_PRIVATE_KEY }} | |
| - name: Create or update release pull request | |
| id: changesets | |
| uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0 | |
| with: | |
| github-token: ${{ steps.app-token.outputs.token }} | |
| version: pnpm version-packages | |
| publish: | |
| name: Publish | |
| if: needs.version.outputs.hasChangesets == 'false' | |
| needs: version | |
| runs-on: ubuntu-latest | |
| environment: npm | |
| timeout-minutes: 10 | |
| permissions: | |
| contents: write # to create release (changesets/action) | |
| id-token: write # to use OpenID Connect token for trusted publishing (changesets/action) | |
| steps: | |
| - name: Check out repo | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - uses: ./.github/actions/ci-setup | |
| with: | |
| skip-cache: true # avoid cache poisoning attacks | |
| - name: Build | |
| run: pnpm build | |
| - name: Publish to npm | |
| uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0 | |
| with: | |
| publish: pnpm changeset publish | |
| commitMode: github-api |