Mirror of
Setup trusted publishing (#18)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Felix Schneider <99918022+trueberryless@users.noreply.github.com>
authored by
trueberryless-org[bot]
github-actions[bot]
Felix Schneider
and committed by
GitHub
2cfc5e52
45480140
+59
-40
+5
.changeset/brown-fireants-fetch.md
+5
.changeset/brown-fireants-fetch.md
+9
-4
.github/workflows/format.yaml
+9
-4
.github/workflows/format.yaml
···
6
6
permissions:
7
7
contents: read
8
8
9
+
env:
10
+
NODE_VERSION: 24.10.0
11
+
9
12
jobs:
10
13
autofix:
11
14
runs-on: ubuntu-latest
12
15
steps:
13
-
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
16
+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
17
+
with:
18
+
persist-credentials: false
14
19
15
20
- name: Setup PNPM
16
-
uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
21
+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
17
22
18
23
- name: Setup Node
19
-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
24
+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
20
25
with:
21
-
node-version: 20.19.5
26
+
node-version: ${{ env.NODE_VERSION }}
22
27
cache: "pnpm"
23
28
24
29
- name: Install Dependencies
+4
-2
.github/workflows/labeler.yaml
+4
-2
.github/workflows/labeler.yaml
···
16
16
app_id: ${{ secrets.BOT_APP_ID }}
17
17
private_key: ${{ secrets.BOT_PRIVATE_KEY }}
18
18
19
-
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
19
+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
20
+
with:
21
+
persist-credentials: false
20
22
- name: Ensure labels exist
21
23
env:
22
24
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
···
49
51
gh label create "🏯 styles" --description "Stylesheets or design updates" --color "550F5A" --force
50
52
gh label create "🔒 wontfix" --description "This will not be worked on" --color "FFFFFF" --force
51
53
52
-
- uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5
54
+
- uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
53
55
with:
54
56
configuration-path: .github/labeler.yaml
55
57
sync-labels: true
+24
-19
.github/workflows/publish.yaml
+24
-19
.github/workflows/publish.yaml
···
11
11
cancel-in-progress: true
12
12
13
13
env:
14
-
REGISTRY: docker.io
15
-
IMAGE_OWNER: trueberryless
16
14
IMAGE_NAME: starlight-save-file-component
17
-
NODE_VERSION: 20
15
+
NODE_VERSION: 24.10.0
18
16
19
17
jobs:
20
18
changes:
···
24
22
starlight-save-file-component: ${{ steps.filter.outputs.starlight-save-file-component }}
25
23
steps:
26
24
- name: Check out the repo
27
-
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
25
+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
26
+
with:
27
+
persist-credentials: false
28
28
29
29
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
30
30
id: filter
···
50
50
private_key: ${{ secrets.BOT_PRIVATE_KEY }}
51
51
52
52
- name: Checkout Repo
53
-
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
53
+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
54
+
with:
55
+
persist-credentials: false
54
56
55
57
- name: Setup PNPM
56
-
uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
58
+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
57
59
58
60
- name: Setup Node
59
-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
61
+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
60
62
with:
61
63
node-version: ${{ env.NODE_VERSION }}
62
64
cache: "pnpm"
···
72
74
title: "ci: release [skip netlify]"
73
75
env:
74
76
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
75
-
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
76
77
77
78
- name: Get published version
78
79
if: steps.changesets.outputs.hasChangesets == 'true'
···
90
91
IMAGE_TAG: ${{ env.IMAGE_TAG }}
91
92
steps:
92
93
- name: Check out the repo
93
-
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
94
+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
95
+
with:
96
+
persist-credentials: false
94
97
95
98
- name: Read version from package.json
96
99
id: get_version
···
102
105
needs: [changes, changesets, image-tag]
103
106
if: >
104
107
(
105
-
needs.changesets.outputs.hasChangesets == 'false' &&
108
+
needs.changesets.outputs.hasChangesets == 'false' &&
106
109
(
107
-
contains(github.event.head_commit.message, 'deploy') ||
110
+
contains(github.event.head_commit.message, 'deploy') ||
108
111
contains(github.event.head_commit.message, 'release')
109
112
)
110
-
) ||
113
+
) ||
111
114
github.event_name == 'workflow_dispatch'
112
115
runs-on: ubuntu-latest
113
116
permissions:
114
117
contents: write
115
118
id-token: write
116
119
steps:
117
-
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
120
+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
121
+
with:
122
+
persist-credentials: false
118
123
119
124
- name: Setup PNPM
120
-
uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
125
+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
121
126
122
127
- name: Setup Node
123
-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
128
+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
124
129
with:
125
130
node-version: ${{ env.NODE_VERSION }}
126
131
cache: "pnpm"
···
131
136
132
137
- run: |
133
138
cd packages/starlight-save-file-component
134
-
npm publish --provenance --access public
135
-
env:
136
-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
139
+
npm publish --access public
137
140
138
141
release:
139
142
name: Release
···
143
146
contents: write
144
147
steps:
145
148
- name: Check out the repo
146
-
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
149
+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
150
+
with:
151
+
persist-credentials: false
147
152
148
153
- id: extract-changelog
149
154
uses: sean0x42/markdown-extract@7b185cbe85263116bbf741e739e7198ba86465dc # v2.1.0
+3
-1
.github/workflows/welcome-bot.yaml
+3
-1
.github/workflows/welcome-bot.yaml
···
20
20
app_id: ${{ secrets.BOT_APP_ID }}
21
21
private_key: ${{ secrets.BOT_PRIVATE_KEY }}
22
22
23
-
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
23
+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
24
+
with:
25
+
persist-credentials: false
24
26
- name: Convert Repository Name to Title Case
25
27
id: convert_repo_name
26
28
run: |
+3
-3
package.json
+3
-3
package.json
···
15
15
"version": "pnpm changeset version && pnpm i --no-frozen-lockfile"
16
16
},
17
17
"devDependencies": {
18
-
"@changesets/changelog-github": "^0.5.0",
19
-
"@changesets/cli": "^2.27.11",
18
+
"@changesets/changelog-github": "^0.5.1",
19
+
"@changesets/cli": "^2.29.7",
20
20
"@trivago/prettier-plugin-sort-imports": "5.2.2",
21
-
"prettier": "3.5.3",
21
+
"prettier": "3.6.2",
22
22
"prettier-plugin-astro": "0.14.1"
23
23
},
24
24
"packageManager": "pnpm@10.10.0"
+11
-11
pnpm-lock.yaml
+11
-11
pnpm-lock.yaml
···
9
9
.:
10
10
devDependencies:
11
11
'@changesets/changelog-github':
12
-
specifier: ^0.5.0
12
+
specifier: ^0.5.1
13
13
version: 0.5.1
14
14
'@changesets/cli':
15
-
specifier: ^2.27.11
15
+
specifier: ^2.29.7
16
16
version: 2.29.7(@types/node@24.9.2)
17
17
'@trivago/prettier-plugin-sort-imports':
18
18
specifier: 5.2.2
19
-
version: 5.2.2(prettier@3.5.3)
19
+
version: 5.2.2(prettier@3.6.2)
20
20
prettier:
21
-
specifier: 3.5.3
22
-
version: 3.5.3
21
+
specifier: 3.6.2
22
+
version: 3.6.2
23
23
prettier-plugin-astro:
24
24
specifier: 0.14.1
25
25
version: 0.14.1
···
1880
1880
engines: {node: '>=10.13.0'}
1881
1881
hasBin: true
1882
1882
1883
-
prettier@3.5.3:
1884
-
resolution: {integrity: sha512-QQtaxnoDJeAkDvDKWCLiwIXkTgRhwYDEQCghU9Z6q03iyek/rxRh/2lC3HB7P8sWT2xC/y5JDctPLBIGzHKbhw==}
1883
+
prettier@3.6.2:
1884
+
resolution: {integrity: sha512-I7AIg5boAr5R0FFtJ6rCfD+LFsWHp81dolrFD8S79U9tb8Az2nGrJncnMSnys+bpQJfRUzqs9hnA81OAA3hCuQ==}
1885
1885
engines: {node: '>=14'}
1886
1886
hasBin: true
1887
1887
···
3215
3215
dependencies:
3216
3216
tslib: 2.8.1
3217
3217
3218
-
'@trivago/prettier-plugin-sort-imports@5.2.2(prettier@3.5.3)':
3218
+
'@trivago/prettier-plugin-sort-imports@5.2.2(prettier@3.6.2)':
3219
3219
dependencies:
3220
3220
'@babel/generator': 7.28.5
3221
3221
'@babel/parser': 7.28.5
···
3223
3223
'@babel/types': 7.28.5
3224
3224
javascript-natural-sort: 0.7.1
3225
3225
lodash: 4.17.21
3226
-
prettier: 3.5.3
3226
+
prettier: 3.6.2
3227
3227
transitivePeerDependencies:
3228
3228
- supports-color
3229
3229
···
4815
4815
prettier-plugin-astro@0.14.1:
4816
4816
dependencies:
4817
4817
'@astrojs/compiler': 2.13.0
4818
-
prettier: 3.5.3
4818
+
prettier: 3.6.2
4819
4819
sass-formatter: 0.7.9
4820
4820
4821
4821
prettier@2.8.8: {}
4822
4822
4823
-
prettier@3.5.3: {}
4823
+
prettier@3.6.2: {}
4824
4824
4825
4825
prismjs@1.30.0: {}
4826
4826