Repository navigation
ci(release): publish to Open VSX from the release workflow - #1
Merged
Merged
Conversation
Problem
- Releases stopped at a GitHub Release, or had no workflow at all; Open VSX was published by hand with a local token.
- Release and CI workflows differed across the five extension repos.
- vsce 4 and ovsx 1.3 require Node 22.
Solution
- release.yml runs on a vX.Y.Z tag, validates tag, package.json and CHANGELOG, tests, packages, creates the GitHub Release, publishes to Open VSX, and confirms the version is live.
- workflow_dispatch with a tag input republishes an existing tag from main.
- ci.yml and release.yml match the other extension repos apart from the NODE_VERSION line. Release docs describe the new flow.
- @vscode/vsce moves to ^4.0.0 and ovsx ^1.3.0 is added as a devDependency.
Decisions
- ovsx uses the OVSX_PAT secret when set and falls back to OIDC trusted publishing when it is empty, so removing the secret needs no workflow change.
- --skip-duplicate makes a retry safe.
- npm audit stays in CI only, so an unrelated advisory cannot block a publish.
Implementation
- .github/workflows/{ci,release}.yml, package.json, package-lock.json, docs/development.md, docs/workflows.md, and repository ignore files where needed.
Notes
- Marketplace publishing stays manual.
- Remove the OVSX_PAT secret after the first OIDC release.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds Open VSX publishing to a tag-triggered release workflow that is identical across the extension repos (OIDC trusted publishing, with the OVSX_PAT secret as fallback), moves vsce to ^4.0.0, and updates the release docs.
🤖 Generated with Claude Code