ac526fb54d
Each shippable artifact (prb, probod server group, probod-bootstrap, @probo/n8n-nodes-probo, @probo/cookie-banner) now has its own version file, its own CHANGELOG.md, its own annotated-tag scheme of the form <track>/v<version>, and its own GitHub Actions release workflow. The unified release.yaml is removed; the unified CHANGELOG.md becomes a short index pointing at each per-track file, with the prior history preserved in CHANGELOG.archive.md. Probod's CHANGELOG carries the post-split monorepo releases (0.174.0 through 0.181.0) so the server-group history stays continuous and the probod docker image keeps its existing version line. contrib/claude/release.md is split into contrib/claude/release/ with one entrypoint per track plus a README that drives the agent: detect which tracks have user-facing commits since their last tag and skip tracks with no relevant changes, so a release request never tags an unchanged track. The cookie-banner and n8n-node entrypoints add an explicit npm run build step after the version bump (build.mjs bakes package.json's version into __SDK_VERSION__) so compile errors and package-lock.json updates are caught before tagging. Signed-off-by: Bryan Frimin <bryan@getprobo.com>
88 lines
3.2 KiB
YAML
88 lines
3.2 KiB
YAML
name: "Release cookie-banner"
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "@probo/cookie-banner/v*"
|
|
|
|
permissions:
|
|
contents: "read"
|
|
|
|
jobs:
|
|
publish:
|
|
name: "publish"
|
|
runs-on: "ubuntu-latest"
|
|
permissions:
|
|
contents: write
|
|
id-token: write
|
|
attestations: write
|
|
steps:
|
|
- uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6
|
|
with:
|
|
fetch-depth: 0
|
|
submodules: recursive
|
|
- uses: "actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f" # v6
|
|
with:
|
|
node-version-file: ".nvmrc"
|
|
cache: "npm"
|
|
registry-url: "https://registry.npmjs.org"
|
|
scope: "@probo"
|
|
- run: "npm ci"
|
|
- name: "Verify package.json version matches tag"
|
|
run: |
|
|
TAG_VERSION="${GITHUB_REF_NAME##*/v}"
|
|
PKG_VERSION="$(node -p "require('./packages/cookie-banner/package.json').version")"
|
|
if [ "$TAG_VERSION" != "$PKG_VERSION" ]; then
|
|
echo "tag version ($TAG_VERSION) does not match package.json version ($PKG_VERSION)" >&2
|
|
exit 1
|
|
fi
|
|
- run: "npm --workspace @probo/cookie-banner run build"
|
|
- uses: "anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610" # v0.24.0
|
|
with:
|
|
path: ./packages/cookie-banner
|
|
format: cyclonedx-json
|
|
output-file: packages/cookie-banner/sbom.json
|
|
- uses: "anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2" # v7.4.0
|
|
with:
|
|
path: ./packages/cookie-banner
|
|
fail-build: true
|
|
severity-cutoff: critical
|
|
- name: "Generate checksums for dist files"
|
|
run: |
|
|
cd packages/cookie-banner/dist
|
|
find . -type f | while read file; do
|
|
echo "$(sha256sum "$file" | head -c 64) $file"
|
|
done > ../checksums.txt
|
|
- run: "npm --workspace @probo/cookie-banner publish --access public --dry-run"
|
|
- run: "npm --workspace @probo/cookie-banner publish --access public"
|
|
- uses: "actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e" # v4
|
|
with:
|
|
subject-path: "packages/cookie-banner/dist/**"
|
|
sbom-path: "packages/cookie-banner/sbom.json"
|
|
- uses: "actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32" # v4
|
|
with:
|
|
subject-path: "packages/cookie-banner/dist/**"
|
|
- name: "Create GitHub release"
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
PRERELEASE_FLAG=""
|
|
if echo "${GITHUB_REF_NAME}" | grep -qE '(alpha|beta|rc)'; then
|
|
PRERELEASE_FLAG="--prerelease"
|
|
fi
|
|
|
|
gh release delete "${GITHUB_REF_NAME}" --yes 2>/dev/null || true
|
|
|
|
gh release create "${GITHUB_REF_NAME}" \
|
|
--title "${GITHUB_REF_NAME}" \
|
|
--notes-file packages/cookie-banner/CHANGELOG.md \
|
|
$PRERELEASE_FLAG \
|
|
packages/cookie-banner/sbom.json packages/cookie-banner/checksums.txt
|
|
- uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7
|
|
with:
|
|
name: "cookie-banner-sbom"
|
|
path: |
|
|
packages/cookie-banner/sbom.json
|
|
packages/cookie-banner/checksums.txt
|
|
retention-days: 30
|