Release #7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| package: | |
| description: "Package to release" | |
| required: true | |
| type: choice | |
| options: | |
| - core | |
| - viewer | |
| - both | |
| bump: | |
| description: "Version bump" | |
| required: true | |
| type: choice | |
| options: | |
| - patch | |
| - minor | |
| - major | |
| dry-run: | |
| description: "Dry run (no publish)" | |
| required: false | |
| type: boolean | |
| default: false | |
| jobs: | |
| release: | |
| runs-on: ubuntu-latest | |
| environment: npm | |
| permissions: | |
| contents: write | |
| id-token: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - uses: oven-sh/setup-bun@v2 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22 | |
| - name: Configure npm auth | |
| run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Configure git | |
| run: | | |
| git config user.name "github-actions[bot]" | |
| git config user.email "github-actions[bot]@users.noreply.github.com" | |
| - name: Debug auth | |
| run: | | |
| echo "npm version: $(npm --version)" | |
| echo "node version: $(node --version)" | |
| npm whoami 2>&1 || echo "whoami failed" | |
| cat ~/.npmrc | sed 's/npm_[a-zA-Z0-9]*/npm_REDACTED/g' | |
| - name: Bump & publish core | |
| if: inputs.package == 'core' || inputs.package == 'both' | |
| working-directory: packages/core | |
| run: | | |
| npm version ${{ inputs.bump }} --no-git-tag-version | |
| VERSION=$(node -p "require('./package.json').version") | |
| echo "CORE_VERSION=$VERSION" >> $GITHUB_ENV | |
| bun run build | |
| echo "📋 Package contents:" | |
| npm pack --dry-run 2>&1 || true | |
| if [ "${{ inputs.dry-run }}" = "true" ]; then | |
| echo "🏜️ Dry run — would publish @pascal-app/core@$VERSION" | |
| npm publish --dry-run --access public | |
| else | |
| npm publish --access public --loglevel verbose 2>&1 || { | |
| echo "❌ Publish failed, dumping debug log:" | |
| cat ~/.npm/_logs/*-debug-0.log 2>/dev/null | tail -50 | |
| exit 1 | |
| } | |
| echo "📦 Published @pascal-app/core@$VERSION" | |
| fi | |
| - name: Bump & publish viewer | |
| if: inputs.package == 'viewer' || inputs.package == 'both' | |
| working-directory: packages/viewer | |
| run: | | |
| npm version ${{ inputs.bump }} --no-git-tag-version | |
| VERSION=$(node -p "require('./package.json').version") | |
| echo "VIEWER_VERSION=$VERSION" >> $GITHUB_ENV | |
| bun run build | |
| if [ "${{ inputs.dry-run }}" = "true" ]; then | |
| echo "🏜️ Dry run — would publish @pascal-app/viewer@$VERSION" | |
| npm publish --dry-run --access public | |
| else | |
| npm publish --access public | |
| echo "📦 Published @pascal-app/viewer@$VERSION" | |
| fi | |
| - name: Commit version bumps & tag | |
| if: inputs.dry-run == false | |
| run: | | |
| git add -A | |
| PKGS="" | |
| TAGS="" | |
| if [ -n "$CORE_VERSION" ]; then | |
| PKGS="$PKGS @pascal-app/core@$CORE_VERSION" | |
| TAGS="$TAGS @pascal-app/core@$CORE_VERSION" | |
| fi | |
| if [ -n "$VIEWER_VERSION" ]; then | |
| PKGS="$PKGS @pascal-app/viewer@$VIEWER_VERSION" | |
| TAGS="$TAGS @pascal-app/viewer@$VIEWER_VERSION" | |
| fi | |
| git commit -m "release:${PKGS}" | |
| for TAG in $TAGS; do | |
| git tag "$TAG" | |
| done | |
| git push --follow-tags |