08a31cacf5
Tighten the repo-state automation so canonical bot commits remain predictable while leaving main clean after each sync. Make the public catalog UI more honest by hiding dev-only sync, turning stars into explicit browser-local saves, aligning risk types, and removing hardcoded catalog counts. Add shared public asset URL helpers, risk suggestion plumbing, safer unpack/sync guards, and CI coverage gates so release and maintainer workflows catch drift earlier.
73 lines
1.7 KiB
YAML
73 lines
1.7 KiB
YAML
# Publish antigravity-awesome-skills to npm on release.
|
|
# Requires NPM_TOKEN secret (npm → Access Tokens → Granular token with Publish).
|
|
# Before creating a Release: bump package.json "version" (npm forbids republishing the same version).
|
|
# Release tag (e.g. v4.6.1) should match package.json version.
|
|
|
|
name: Publish to npm
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
on:
|
|
release:
|
|
types: [published]
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
publish:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Setup Python
|
|
uses: actions/setup-python@v5
|
|
with:
|
|
python-version: "3.10"
|
|
|
|
- name: Install Python dependencies
|
|
run: pip install -r tools/requirements.txt
|
|
|
|
- name: Setup Node
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "20"
|
|
registry-url: "https://registry.npmjs.org"
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Audit npm dependencies
|
|
run: npm audit --audit-level=high
|
|
|
|
- name: Validate references
|
|
run: npm run validate:references
|
|
|
|
- name: Sync release state
|
|
run: npm run sync:release-state
|
|
|
|
- name: Run tests
|
|
run: npm run test
|
|
|
|
- name: Run web app coverage
|
|
run: npm run app:test:coverage
|
|
|
|
- name: Run docs security checks
|
|
run: npm run security:docs
|
|
|
|
- name: Install web-app dependencies
|
|
run: npm run app:install
|
|
|
|
- name: Build web app
|
|
run: npm run app:build
|
|
|
|
- name: Verify canonical release state
|
|
run: git diff --exit-code
|
|
|
|
- name: Dry-run npm package
|
|
run: npm pack --dry-run --json
|
|
|
|
- name: Publish
|
|
run: npm publish
|
|
env:
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|