Release #630
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| workflow_dispatch: | |
| jobs: | |
| create-metadata: | |
| runs-on: ubuntu-latest | |
| if: github.repository_owner == 'modelcontextprotocol' | |
| outputs: | |
| hash: ${{ steps.last-release.outputs.hash }} | |
| version: ${{ steps.create-version.outputs.version}} | |
| npm_packages: ${{ steps.create-npm-packages.outputs.npm_packages}} | |
| pypi_packages: ${{ steps.create-pypi-packages.outputs.pypi_packages}} | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Get last release hash | |
| id: last-release | |
| run: | | |
| HASH=$(git rev-list --tags --max-count=1 || echo "HEAD~1") | |
| echo "hash=${HASH}" >> $GITHUB_OUTPUT | |
| echo "Using last release hash: ${HASH}" | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@v5 | |
| - name: Create version name | |
| id: create-version | |
| run: | | |
| VERSION=$(uv run --script scripts/release.py generate-version) | |
| echo "version $VERSION" | |
| echo "version=$VERSION" >> $GITHUB_OUTPUT | |
| - name: Create notes | |
| run: | | |
| HASH="${{ steps.last-release.outputs.hash }}" | |
| uv run --script scripts/release.py generate-notes --directory src/ $HASH > RELEASE_NOTES.md | |
| cat RELEASE_NOTES.md | |
| - name: Release notes | |
| uses: actions/upload-artifact@v6 | |
| with: | |
| name: release-notes | |
| path: RELEASE_NOTES.md | |
| - name: Create python matrix | |
| id: create-pypi-packages | |
| run: | | |
| HASH="${{ steps.last-release.outputs.hash }}" | |
| PYPI=$(uv run --script scripts/release.py generate-matrix --pypi --directory src $HASH) | |
| echo "pypi_packages $PYPI" | |
| echo "pypi_packages=$PYPI" >> $GITHUB_OUTPUT | |
| - name: Create npm matrix | |
| id: create-npm-packages | |
| run: | | |
| HASH="${{ steps.last-release.outputs.hash }}" | |
| NPM=$(uv run --script scripts/release.py generate-matrix --npm --directory src $HASH) | |
| echo "npm_packages $NPM" | |
| echo "npm_packages=$NPM" >> $GITHUB_OUTPUT | |
| update-packages: | |
| needs: [create-metadata] | |
| if: ${{ needs.create-metadata.outputs.npm_packages != '[]' || needs.create-metadata.outputs.pypi_packages != '[]' }} | |
| runs-on: ubuntu-latest | |
| environment: release | |
| permissions: | |
| contents: write | |
| outputs: | |
| changes_made: ${{ steps.commit.outputs.changes_made }} | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@v5 | |
| - name: Update packages | |
| run: | | |
| HASH="${{ needs.create-metadata.outputs.hash }}" | |
| uv run --script scripts/release.py update-packages --directory src/ $HASH | |
| - name: Configure git | |
| run: | | |
| git config --global user.name "GitHub Actions" | |
| git config --global user.email "actions@github.com" | |
| - name: Commit changes | |
| id: commit | |
| run: | | |
| VERSION="${{ needs.create-metadata.outputs.version }}" | |
| git add -u | |
| if git diff-index --quiet HEAD; then | |
| echo "changes_made=false" >> $GITHUB_OUTPUT | |
| else | |
| git commit -m 'Automatic update of packages' | |
| git tag -a "$VERSION" -m "Release $VERSION" | |
| git push origin "$VERSION" | |
| echo "changes_made=true" >> $GITHUB_OUTPUT | |
| fi | |
| publish-pypi: | |
| needs: [update-packages, create-metadata] | |
| if: ${{ needs.create-metadata.outputs.pypi_packages != '[]' && needs.create-metadata.outputs.pypi_packages != '' }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| package: ${{ fromJson(needs.create-metadata.outputs.pypi_packages) }} | |
| name: Build ${{ matrix.package }} | |
| environment: release | |
| permissions: | |
| id-token: write # Required for trusted publishing | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| ref: ${{ needs.create-metadata.outputs.version }} | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@v5 | |
| - name: Set up Python | |
| uses: actions/setup-python@v6 | |
| with: | |
| python-version-file: "src/${{ matrix.package }}/.python-version" | |
| - name: Install dependencies | |
| working-directory: src/${{ matrix.package }} | |
| run: uv sync --frozen --all-extras --dev | |
| - name: Run pyright | |
| working-directory: src/${{ matrix.package }} | |
| run: uv run --frozen pyright | |
| - name: Run tests | |
| working-directory: src/${{ matrix.package }} | |
| run: | | |
| if [ -d "tests" ] || [ -d "test" ]; then | |
| uv run --frozen pytest | |
| else | |
| echo "No tests directory, skipping" | |
| fi | |
| - name: Build package | |
| working-directory: src/${{ matrix.package }} | |
| run: uv build | |
| - name: Publish package to PyPI | |
| uses: pypa/gh-action-pypi-publish@release/v1 | |
| with: | |
| packages-dir: src/${{ matrix.package }}/dist | |
| skip-existing: true # re-runs tolerate already-uploaded files | |
| publish-npm: | |
| needs: [update-packages, create-metadata] | |
| if: ${{ needs.create-metadata.outputs.npm_packages != '[]' && needs.create-metadata.outputs.npm_packages != '' }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| package: ${{ fromJson(needs.create-metadata.outputs.npm_packages) }} | |
| name: Build ${{ matrix.package }} | |
| environment: release | |
| permissions: | |
| contents: read | |
| id-token: write # Required for npm trusted publishing (OIDC) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| ref: ${{ needs.create-metadata.outputs.version }} | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version: 22 | |
| cache: npm | |
| registry-url: 'https://registry.npmjs.org' | |
| # OIDC trusted publishing requires npm >=11.5.1; Node 22's bundled npm is 10.x. | |
| - name: Ensure npm CLI supports OIDC trusted publishing | |
| run: npm install -g npm@^11.5.1 | |
| - name: Install dependencies | |
| working-directory: src/${{ matrix.package }} | |
| run: npm ci | |
| - name: Check if version exists on npm | |
| working-directory: src/${{ matrix.package }} | |
| run: | | |
| VERSION=$(jq -r .version package.json) | |
| if npm view --json | jq -e --arg version "$VERSION" '[.[]][0].versions | contains([$version])'; then | |
| echo "Version $VERSION already exists on npm" | |
| exit 1 | |
| fi | |
| echo "Version $VERSION is new, proceeding with publish" | |
| - name: Run tests | |
| working-directory: src/${{ matrix.package }} | |
| run: npm test --if-present | |
| - name: Build package | |
| working-directory: src/${{ matrix.package }} | |
| run: npm run build | |
| # Authenticates via OIDC trusted publishing (no token) — each package's | |
| # npm trusted publisher is bound to this workflow + the release environment | |
| - name: Publish package | |
| working-directory: src/${{ matrix.package }} | |
| run: | | |
| npm publish --access public | |
| env: | |
| NPM_CONFIG_PROVENANCE: "true" | |
| create-release: | |
| needs: [update-packages, create-metadata, publish-pypi, publish-npm] | |
| if: | | |
| always() && | |
| needs.update-packages.outputs.changes_made == 'true' && | |
| (needs.publish-pypi.result == 'success' || needs.publish-npm.result == 'success') | |
| runs-on: ubuntu-latest | |
| environment: release | |
| permissions: | |
| contents: write | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Download release notes | |
| uses: actions/download-artifact@v7 | |
| with: | |
| name: release-notes | |
| - name: Create release | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN}} | |
| run: | | |
| VERSION="${{ needs.create-metadata.outputs.version }}" | |
| gh release create "$VERSION" \ | |
| --title "Release $VERSION" \ | |
| --notes-file RELEASE_NOTES.md | |