FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
angular/.github/workflows/release.yml at main · NativeScript/angular · GitHub
Uh oh!
There was an error while loading.
Please reload this page
.
NativeScript
/
angular
Public
Uh oh!
There was an error while loading.
Please reload this page
.
Notifications
You must be signed in to change notification settings
Fork
13
Star
55
Code
Issues
38
Pull requests
4
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Expand file tree
Breadcrumbs
angular
/
.github
/
workflows
/
release.yml
Copy path
View runs
More file actions
More file actions
Latest commit
History
History
History
121 lines (115 loc) · 4.13 KB
Breadcrumbs
angular
/
.github
/
workflows
/
release.yml
Copy path
File metadata and controls
121 lines (115 loc) · 4.13 KB
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
name
:
Release
on
:
workflow_dispatch
:
inputs
:
project
:
description
:
Package to release
type
:
choice
options
:
[angular, zone-js]
default
:
angular
version
:
description
:
Version specifier (e.g. 22.0.0, 22.0.0-rc.4, patch, minor)
required
:
true
dry-run
:
description
:
Dry run (preview only, no push/publish)
type
:
boolean
default
:
true
concurrency
:
group
:
nx-release-${{ github.ref }}
cancel-in-progress
:
false
permissions
:
contents
:
write
#
push release commit + tag, create GitHub release
id-token
:
write
#
npm provenance / trusted publishing (OIDC)
env
:
NX_CLOUD_ACCESS_TOKEN
:
${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
jobs
:
release
:
runs-on
:
ubuntu-latest
environment
:
name
:
${{ inputs.dry-run && 'npm-publish-dry-run' || 'npm-publish' }}
steps
:
-
uses
:
actions/checkout@v6
with
:
#
nx release needs tags + full history to build the changelog
fetch-depth
:
0
-
uses
:
actions/setup-node@v6
with
:
node-version
:
lts/*
cache
:
npm
registry-url
:
https://registry.npmjs.org
-
name
:
Update npm (required for OIDC trusted publishing)
run
:
|
npm install -g npm@^11.5.1
npm --version
-
run
:
npm install --force
-
name
:
Configure git author
run
:
|
git config user.name "github-actions[bot]"
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
#
Publishing is intentionally split out (--skip-publish) so the OIDC
#
token-clearing logic below wraps only the publish step.
-
name
:
nx release version + changelog
run
:
>
npx nx release ${{ inputs.version }}
--groups=${{ inputs.project }}
--skip-publish
${{ inputs.dry-run && '--dry-run' || '' }}
env
:
GITHUB_TOKEN
:
${{ secrets.GITHUB_TOKEN }}
#
Prereleases (e.g. 22.0.0-rc.4) publish to their prerelease dist-tag (rc),
#
never latest. In a dry run keyword specifiers (patch/minor) resolve from
#
the unbumped manifest, so the previewed tag may differ from a real run.
-
name
:
Resolve npm dist-tag
id
:
dist-tag
shell
:
bash
run
:
|
set -euo pipefail
spec='${{ inputs.version }}'
if [[ "$spec" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-.+)?$ ]]; then
version="$spec"
else
version=$(node -p "require('./packages/${{ inputs.project }}/package.json').version")
fi
if [[ "$version" == *-* ]]; then
pre="${version#*-}"
tag="${pre%%.*}"
if [[ "$tag" =~ ^[0-9]+$ ]]; then
tag="next"
fi
else
tag="latest"
fi
echo "Resolved version ${version} -> dist-tag ${tag}"
echo "tag=${tag}" >> "$GITHUB_OUTPUT"
#
OIDC trusted publishing (default): npm must find no token auth at all,
#
otherwise it uses the token instead of the OIDC exchange.
-
name
:
nx release publish (OIDC)
if
:
${{ vars.USE_NPM_TOKEN != 'true' }}
shell
:
bash
env
:
NPM_CONFIG_PROVENANCE
:
true
NODE_AUTH_TOKEN
:
"
"
run
:
|
set -euo pipefail
unset NODE_AUTH_TOKEN
rm -f ~/.npmrc ||
true
if [[ -n "${NPM_CONFIG_USERCONFIG:-}" ]]; then
rm -f "$NPM_CONFIG_USERCONFIG" ||
true
fi
npx nx release publish \
--groups=${{ inputs.project }} \
--tag "${{ steps.dist-tag.outputs.tag }}" \
--access public \
${{ inputs.dry-run && '--dry-run' || '' }}
#
Token fallback: only when explicitly enabled via repo variable USE_NPM_TOKEN=true.
-
name
:
nx release publish (token)
if
:
${{ vars.USE_NPM_TOKEN == 'true' }}
env
:
NODE_AUTH_TOKEN
:
${{ secrets.NPM_TOKEN }}
NPM_CONFIG_PROVENANCE
:
true
run
:
>
npx nx release publish
--groups=${{ inputs.project }}
--tag "${{ steps.dist-tag.outputs.tag }}"
--access public
${{ inputs.dry-run && '--dry-run' || '' }}
Back
|
FazBrowse Home
|
New Git URL