ci: single-workflow Friday train (train.yml) - #70
Merged
Conversation
Replaces release-prepare.yml + release-build.yml with one fully automated Friday train: merges green dependabot PRs, decides the bump from commit subjects, bumps all 6 packages, writes the changelog, commits direct to master, and publishes via OIDC trusted publishing (no NPM_TOKEN).
Contributor
|
🎉 PR Validation ✅ PASSED Commit: Checks:
Ready to merge! ✨ 🔗 View workflow run |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Replaces
release-prepare.yml+release-build.ymlwith a single fully automated Friday train.What it does (cron
0 19 * * 5, plusworkflow_dispatch):deps- squash-merges dependabot PRs whose checks are green (proven logic lifted from release-prepare.yml).release- syncs to post-merge master, decides the bump from commit subjects (code -> minor, deps-only -> patch, nothing -> skip), bumps all 6 packages viascripts/bump-versions.js, writes the changelog (AI best-effort + git-subject fallback), verifies, commits + tags direct to master, publishes the 6 packages in dep order, then asserts npm serves each one and cuts the GH release.Changes vs the old pair
id-token: write, npm upgraded to latest) -NPM_TOKENis no longer used.EPUBLISHCONFLICTis tolerated, anything else fails the run.bump=nonedispatch = repair mode (republish the current version).Red run is the only alarm; there are no silent-skip states.
Untouched:
ci.yml,pr-validation.yml,dependabot.yml.Verified locally:
npm ci && npm run verifygreen (prettier covers.github/**YAML),bash -nclean on all 8 embedded script blocks,action-validatorclean.Note: publishing will fail until npm trusted publishing is configured for the 6 packages (expected, next phase).