Repository navigation
153 lines (130 loc) · 4.27 KB
/
Copy pathrelease.yml
File metadata and controls
153 lines (130 loc) · 4.27 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
name: Release
on:
push:
branches:
- main
concurrency:
group: release-${{ github.ref }}
jobs:
quality:
name: Quality
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup pnpm
uses: pnpm/action-setup@v4
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: 24
cache: pnpm
- name: Install dependencies
run: pnpm install --frozen-lockfile
- name: Check
run: pnpm check
release-please:
name: Release Please
needs: quality
runs-on: ubuntu-latest
permissions:
contents: read
outputs:
release_created: ${{ steps.release.outputs.release_created }}
release_sha: ${{ steps.release.outputs.sha }}
tag_name: ${{ steps.release.outputs.tag_name }}
steps:
- name: Create release token
id: app-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
with:
client-id: ${{ vars.RELEASE_APP_CLIENT_ID }}
private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
permission-contents: write
permission-issues: write
permission-pull-requests: write
- name: Run Release Please
id: release
uses: googleapis/release-please-action@v5
with:
token: ${{ steps.app-token.outputs.token }}
- name: Read release pull request branch
id: release-pr
if: steps.release.outputs.prs_created == 'true'
env:
RELEASE_PR: ${{ steps.release.outputs.pr }}
run: echo "branch=$(jq -r '.headBranchName' <<< "$RELEASE_PR")" >> "$GITHUB_OUTPUT"
- name: Checkout release pull request
if: steps.release.outputs.prs_created == 'true'
uses: actions/checkout@v6
with:
ref: ${{ steps.release-pr.outputs.branch }}
token: ${{ steps.app-token.outputs.token }}
- name: Setup Node.js
if: steps.release.outputs.prs_created == 'true'
uses: actions/setup-node@v6
with:
node-version: 24
- name: Sync Obsidian release metadata
if: steps.release.outputs.prs_created == 'true'
run: node version-bump.mjs
- name: Commit release metadata
if: steps.release.outputs.prs_created == 'true'
env:
PR_BRANCH: ${{ steps.release-pr.outputs.branch }}
run: |
if git diff --quiet -- manifest.json versions.json; then
exit 0
fi
git config user.name "github-actions[bot]"
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
git add manifest.json versions.json
git commit -m "chore: sync Obsidian release metadata"
git push origin "HEAD:${PR_BRANCH}"
publish:
name: Publish release
needs: release-please
if: needs.release-please.outputs.release_created == 'true'
runs-on: ubuntu-latest
permissions:
attestations: write
contents: write
id-token: write
steps:
- name: Checkout release commit
uses: actions/checkout@v6
with:
ref: ${{ needs.release-please.outputs.release_sha }}
- name: Setup pnpm
uses: pnpm/action-setup@v4
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: 24
cache: pnpm
- name: Install dependencies
run: pnpm install --frozen-lockfile
- name: Build
run: pnpm build
- name: Verify Obsidian release metadata
run: |
node version-bump.mjs
git diff --exit-code -- manifest.json versions.json
- name: Attest release assets
uses: actions/attest@v4
with:
subject-path: |
main.js
manifest.json
- name: Upload release assets
env:
GH_TOKEN: ${{ github.token }}
TAG_NAME: ${{ needs.release-please.outputs.tag_name }}
run: gh release upload "$TAG_NAME" main.js manifest.json --clobber
- name: Publish draft release
env:
GH_TOKEN: ${{ github.token }}
TAG_NAME: ${{ needs.release-please.outputs.tag_name }}
run: gh release edit "$TAG_NAME" --draft=false