Skip to content

feat(ci): unify release workflows for npm Trusted Publishers OIDC#142

Merged
Palbahngmiyine merged 1 commit intosolapi:betafrom
Palbahngmiyine:ci/unified-release-workflow-beta
Apr 16, 2026
Merged

feat(ci): unify release workflows for npm Trusted Publishers OIDC#142
Palbahngmiyine merged 1 commit intosolapi:betafrom
Palbahngmiyine:ci/unified-release-workflow-beta

Conversation

@Palbahngmiyine
Copy link
Copy Markdown
Member

Summary

  • release-please.yml + release-please-beta.yml → 단일 release.yml 통합
  • npm Trusted Publishers OIDC 전용 publish 전환 (NPM_TOKEN fallback 제거)
  • Astral 보안 가이드라인 준수 (env 변수 사용, status reporting 정규화)

Changes

작업 파일
생성 .github/workflows/release.yml
삭제 .github/workflows/release-please.yml
삭제 .github/workflows/release-please-beta.yml

수동 설정 필요

  1. Settings > Actions > General > Allow GitHub Actions to create and approve pull requests 체크
  2. npmjs.com Trusted Publishers: workflow=release.yml, environment=release
  3. release environment: deployment branches를 master, beta로 제한

🤖 Generated with Claude Code

Merge release-please.yml and release-please-beta.yml into a single
release.yml to enable npm Trusted Publishers, which requires exactly
one workflow filename per package.

Key changes:
- Branch-conditional logic via github.ref_name for config/manifest/tag
- OIDC-only publishing: remove NPM_TOKEN fallback and --provenance flag
- Normalize status reporting with continue-on-error across all jobs
- Add publish failure reporting to stable releases (was beta-only)
- Use env vars instead of inline expressions in run blocks (security)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@gemini-code-assist
Copy link
Copy Markdown

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@Palbahngmiyine Palbahngmiyine merged commit cde8d5f into solapi:beta Apr 16, 2026
8 checks passed
@Palbahngmiyine Palbahngmiyine deleted the ci/unified-release-workflow-beta branch April 16, 2026 07:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant