pgtyped-rescript/.github/workflows/release.yml at 71ca90bf8080c8ecde42bf339b69cd5d81fb8347 · zth/pgtyped-rescript · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
name: Release

on:
  pull_request:
    paths:
      - '.github/workflows/release.yml'
      - 'package.json'
      - 'package-lock.json'
      - 'packages/**'
  workflow_dispatch:
  push:
    tags:
      - '[0-9]*.[0-9]*.[0-9]*'
      - 'v[0-9]*.[0-9]*.[0-9]*'

permissions:
  contents: read

jobs:
  package-checks:
    name: Package build and test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'
          registry-url: 'https://registry.npmjs.org'

      - run: npm ci

      - name: Validate release tag
        if: startsWith(github.ref, 'refs/tags/')
        run: |
          tag="${GITHUB_REF_NAME#v}"
          matched_package=""

          for package_dir in \
            packages/wire \
            packages/parser \
            packages/runtime \
            packages/query \
            packages/cli
          do
            package_name="$(node -p "require('./${package_dir}/package.json').name")"
            package_version="$(node -p "require('./${package_dir}/package.json').version")"

            if [ "$tag" = "$package_version" ]; then
              matched_package="${matched_package}${matched_package:+, }${package_name}@${package_version}"
            fi
          done

          if [ -z "$matched_package" ]; then
            echo "Tag $GITHUB_REF_NAME does not match any publishable package version"
            exit 1
          fi

          echo "Tag $GITHUB_REF_NAME matches ${matched_package}"

      - name: Build packages
        run: npm run build

      - name: Run lint
        run: npm run lint

      - name: Run package tests
        run: npx lerna run test --ignore @pgtyped/example --stream
        env:
          NODE_VERSION: '20'

  full-tests:
    name: Full test suite
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'
          registry-url: 'https://registry.npmjs.org'

      - run: npm ci

      - name: Build packages
        run: npm run build

      - name: Run full test suite
        run: npm test
        env:
          NODE_VERSION: '20'

  dry-run:
    name: Publish dry run
    needs: package-checks
    if: ${{ !startsWith(github.ref, 'refs/tags/') }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '24'
          cache: 'npm'
          registry-url: 'https://registry.npmjs.org'

      - run: npm ci
      - run: npm run build

      - name: Dry-run publish packages
        run: |
          set -euo pipefail

          for package_dir in \
            packages/wire \
            packages/parser \
            packages/runtime \
            packages/query \
            packages/cli
          do
            package_name="$(node -p "require('./${package_dir}/package.json').name")"
            package_version="$(node -p "require('./${package_dir}/package.json').version")"

            echo "Dry-running ${package_name}@${package_version}"
            if npm view "${package_name}@${package_version}" version >/dev/null 2>&1; then
              echo "${package_name}@${package_version} is already published; validating package contents only"
              npm pack "./${package_dir}" --dry-run
              continue
            fi

            npm publish "./${package_dir}" --access public --dry-run
          done

  publish:
    name: Publish to npm
    needs:
      - package-checks
      - full-tests
    if: startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-latest
    environment: npm
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@v4

      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '24'
          cache: 'npm'
          registry-url: 'https://registry.npmjs.org'

      - run: npm ci
      - run: npm run build

      - name: Publish packages with npm trusted publishing
        run: |
          set -euo pipefail
          release_version="${GITHUB_REF_NAME#v}"

          for package_dir in \
            packages/wire \
            packages/parser \
            packages/runtime \
            packages/query \
            packages/cli
          do
            package_name="$(node -p "require('./${package_dir}/package.json').name")"
            package_version="$(node -p "require('./${package_dir}/package.json').version")"

            if [ "$package_version" != "$release_version" ]; then
              echo "Skipping ${package_name}@${package_version}; tag ${GITHUB_REF_NAME} releases ${release_version}"
              continue
            fi

            if npm view "${package_name}@${package_version}" version >/dev/null 2>&1; then
              echo "${package_name}@${package_version} is already published; skipping"
              continue
            fi

            echo "Publishing ${package_name}@${package_version}"
            npm publish "./${package_dir}" --access public --provenance
          done