Skip to content

ci(release): harden release push order + bump checkout to v5 #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
xergioalex merged 1 commit into from
Jun 1, 2026
Merged

ci(release): harden release push order + bump checkout to v5 #5

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions .github/workflows/auto-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
# Skip our own release commits to prevent an infinite loop.
if: ${{ !startsWith(github.event.head_commit.message, 'chore(release):') }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v5
with:
fetch-depth: 0
# Uses `AUTOMATION_GITHUB_TOKEN` (the org convention) so the bot
Expand Down Expand Up @@ -168,8 +168,16 @@ jobs:
run: |
git add -A
git commit -m "chore(release): ${NEW_VERSION} [skip ci]"
# Push the branch FIRST. If main is rejected (e.g. branch
# protection), we bail out here BEFORE creating/pushing the tag, so
# a failed run can never leave a dangling tag pointing at a commit
# that isn't reachable from main (which would block every future
# release with an "already exists" tag push).
git push origin HEAD:main
# main accepted the release commit — now tag that exact commit and
# push the tag on its own.
git tag -a "$NEW_TAG" -m "Release ${NEW_VERSION}"
git push origin main --follow-tags
git push origin "refs/tags/${NEW_TAG}"

- name: Create GitHub Release
if: steps.version.outputs.skip != 'true'
Expand Down
Loading