chore(ci): split release.yml into build/publish/release-notes/notify … #12
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | ||
| permissions: | ||
| contents: read | ||
| on: | ||
| push: | ||
| tags: | ||
| - 'v*' | ||
| jobs: | ||
| build: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| with: | ||
| fetch-depth: 0 | ||
| - name: ⎔ Setup pnpm | ||
| uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 | ||
| - name: ⎔ Setup Node.js | ||
| uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 | ||
| with: | ||
| node-version: 24 | ||
| cache: pnpm | ||
| - name: 📥 Install dependencies | ||
| run: pnpm install --ignore-scripts --frozen-lockfile | ||
| - name: 🔍 Type Check | ||
| run: pnpm run typecheck | ||
| - name: 🧪 Test | ||
| run: pnpm run test | ||
| - name: 🏗️ Build | ||
| run: pnpm run build | ||
| - name: 📦 Validate build artifacts | ||
| run: | | ||
| # Check if dist directory exists | ||
| if [ ! -d "dist" ]; then | ||
| echo "❌ dist directory is missing but declared in package.json" | ||
| exit 1 | ||
| fi | ||
| # Check if dist contains files | ||
| if [ -z "$(ls -A dist)" ]; then | ||
| echo "❌ dist directory is empty" | ||
| exit 1 | ||
| fi | ||
| # Check for index.js and index.d.ts | ||
| if [ ! -f "dist/index.js" ] || [ ! -f "dist/index.d.ts" ]; then | ||
| echo "❌ Missing required files in dist/" | ||
| echo "Required: index.js and index.d.ts" | ||
| echo "Found: $(ls dist)" | ||
| exit 1 | ||
| fi | ||
| echo "✅ Build artifacts validation passed" | ||
| - name: 📤 Upload package artifact | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | ||
| with: | ||
| name: package | ||
| path: | | ||
| dist/ | ||
| package.json | ||
| README.md | ||
| LICENSE | ||
| retention-days: 1 | ||
| if-no-files-found: error | ||
| publish: | ||
| needs: build | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| id-token: write | ||
| contents: read | ||
| steps: | ||
| - name: ⎔ Setup pnpm | ||
| uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 | ||
| - name: ⎔ Setup Node.js | ||
| uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 | ||
| with: | ||
| node-version: 24 | ||
| registry-url: 'https://registry.npmjs.org' | ||
| - name: 📥 Download package artifact | ||
| uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 | ||
| with: | ||
| name: package | ||
| - name: 📦 Publish to NPM | ||
| run: pnpm publish --no-git-checks --ignore-scripts | ||
| env: | ||
| NODE_AUTH_TOKEN: "" # Clear placeholder set by setup-node to enable OIDC | ||
| release-notes: | ||
| needs: publish | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| contents: write | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| with: | ||
| fetch-depth: 0 | ||
| - name: ⎔ Setup Node.js | ||
| uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 | ||
| with: | ||
| node-version: 24 | ||
| - name: 📝 Update Changelog | ||
| run: npx changelogithub@14.0.0 | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| notify: | ||
| needs: [build, publish, release-notes] | ||
| if: always() | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: 📣 Notify release result | ||
| uses: marimo-team/internal-gh-actions/release-notification@ba06d4db1f3c5c9b86983ce409e57196f8376777 # main | ||
| with: | ||
| status: ${{ (contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled')) && 'failure' || 'success' }} | ||
| slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL_RELEASES }} | ||
| artifact-url: "https://npmjs.com/package/@marimo-team/codemirror-sql" | ||
