🔒 fix: bound the ruby_llm dependency below 2.0 #4

	name: Release

	# Pushing a v* tag publishes that version. There is no API key anywhere: RubyGems
	# trusted publishing exchanges this workflow's OIDC identity for a short-lived token,
	# so nothing long-lived exists to leak.
	on:
	push:
	tags: ['v*']
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	publish:
	name: Build and publish
	runs-on: ubuntu-latest
	permissions:
	contents: write
	id-token: write

	steps:
	- uses: actions/checkout@v7

	- name: Set up Ruby
	uses: ruby/setup-ruby@v1
	with:
	ruby-version: '4.0'
	bundler-cache: true

	# The same gates CI runs, repeated here: a tag must not publish something
	# that would have failed on a pull request.
	- name: Run specs
	run: bundle exec rake spec

	- name: Replay recorded workflow cassettes
	run: bundle exec rake spec:replay

	- name: Run RuboCop
	run: bundle exec rubocop

	# Exchanges this job's OIDC identity for a short-lived RubyGems token. Requires a
	# trusted publisher registered for this repository and workflow filename.
	- name: Configure trusted publishing credentials
	uses: rubygems/configure-rubygems-credentials@v2.1.0

	# Deliberately not rubygems/release-gem: that runs `rake release`, which tags the
	# version itself and refuses to run when the tag already exists — and the tag is what
	# triggered this workflow.
	- name: Build gem
	run: gem build ruby_llm-team.gemspec

	- name: Publish to RubyGems
	run: gem push ruby_llm-team-*.gem

Navigation Menu