mirror of
https://github.com/danielsogl/awesome-cordova-plugins.git
synced 2026-08-04 00:00:08 +08:00
Daniel Sogl
1789d08183
checkout v4.3.1 -> v7.0.1, setup-node v4.4.0 -> v7.0.0, stale v9.1.0 -> v10.4.0. The breaking changes across those majors do not apply here: - checkout v5/v6 harden `pull_request_target` checkouts; no workflow uses it - setup-node v5 auto-caches when package.json has a `packageManager` field; it has none, and `cache: npm` is set explicitly anyway - setup-node v7 drops the dummy NODE_AUTH_TOKEN export; the publish job sets NODE_AUTH_TOKEN itself - stale v10 only moves the runtime to node 24 All of them also raise the runtime to node 24, which clears the deprecation warnings on recent runs.
69 lines
1.9 KiB
YAML
69 lines
1.9 KiB
YAML
name: Release Please
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: write
|
|
pull-requests: write
|
|
issues: write
|
|
id-token: write
|
|
|
|
jobs:
|
|
release-please:
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
release_created: ${{ steps.release.outputs.release_created }}
|
|
tag_name: ${{ steps.release.outputs.tag_name }}
|
|
version: ${{ steps.release.outputs.version }}
|
|
steps:
|
|
- name: Run Release Please
|
|
id: release
|
|
uses: googleapis/release-please-action@v4.4.0
|
|
with:
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
config-file: release-please-config.json
|
|
manifest-file: .release-please-manifest.json
|
|
|
|
# npm trusted publishing validates the OIDC claim of the *entry point* workflow,
|
|
# not the one that runs `npm publish`. Keep this job inline — a reusable workflow
|
|
# here breaks the trust check. See https://github.com/npm/documentation/issues/1755
|
|
publish:
|
|
needs: release-please
|
|
if: ${{ needs.release-please.outputs.release_created }}
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
id-token: write
|
|
steps:
|
|
- uses: actions/checkout@v7.0.1
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v7.0.0
|
|
with:
|
|
# node 24 bundles npm 11.16, over the >= 11.5.1 that trusted publishing needs
|
|
node-version: 24
|
|
cache: npm
|
|
registry-url: https://registry.npmjs.org
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Lint
|
|
run: npm run lint -- --quiet
|
|
|
|
- name: Test
|
|
run: npm test
|
|
|
|
- name: Build
|
|
run: npm run build
|
|
|
|
- name: Publish to npm
|
|
env:
|
|
# fallback for packages without a trusted publisher yet (e.g. brand new plugins).
|
|
# OIDC takes precedence whenever the package has one configured.
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
run: npm run npmpub
|