From e8680ffb947229ff45359e0d24f088dfd6f2997f Mon Sep 17 00:00:00 2001 From: dharveykpler <172981491+dharveykpler@users.noreply.github.com> Date: Tue, 22 Apr 2025 17:13:32 +0100 Subject: [PATCH 1/7] fix: create dry-run workflow --- .github/workflows/dry-run.yaml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/workflows/dry-run.yaml diff --git a/.github/workflows/dry-run.yaml b/.github/workflows/dry-run.yaml new file mode 100644 index 0000000..78bb293 --- /dev/null +++ b/.github/workflows/dry-run.yaml @@ -0,0 +1,30 @@ +name: Dry Run + +permissions: + contents: write # to be able to publish a GitHub release + id-token: write # to enable use of OIDC for npm provenance + packages: write + +on: + pull_request: + +jobs: + dry-run-release: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - uses: actions/setup-node@v4 + with: + node-version: '22.x' + - run: npm ci + - run: npx semantic-release --dry-run + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + - run: npm pkg set publishConfig.provenance=false + - uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.GITHUB_TOKEN }} + registry: 'https://npm.pkg.github.com' + access: restricted + dry-run: 'true' From 69129790523f36c91cf09819ff1b363ad9a12e5a Mon Sep 17 00:00:00 2001 From: dharveykpler <172981491+dharveykpler@users.noreply.github.com> Date: Tue, 22 Apr 2025 17:15:31 +0100 Subject: [PATCH 2/7] fix: temp enable provenance --- .github/workflows/dry-run.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dry-run.yaml b/.github/workflows/dry-run.yaml index 78bb293..2484546 100644 --- a/.github/workflows/dry-run.yaml +++ b/.github/workflows/dry-run.yaml @@ -17,7 +17,7 @@ jobs: with: node-version: '22.x' - run: npm ci - - run: npx semantic-release --dry-run + #- run: npx semantic-release --dry-run env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} From 2b4a705e60fe0e9e57e336aa6b5bcb3c41fd7143 Mon Sep 17 00:00:00 2001 From: dharveykpler <172981491+dharveykpler@users.noreply.github.com> Date: Tue, 22 Apr 2025 17:17:03 +0100 Subject: [PATCH 3/7] fix: properly enable provenance --- .github/workflows/dry-run.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dry-run.yaml b/.github/workflows/dry-run.yaml index 2484546..1ad6a8c 100644 --- a/.github/workflows/dry-run.yaml +++ b/.github/workflows/dry-run.yaml @@ -17,11 +17,11 @@ jobs: with: node-version: '22.x' - run: npm ci - #- run: npx semantic-release --dry-run + - run: npx semantic-release --dry-run env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} - - run: npm pkg set publishConfig.provenance=false + #- run: npm pkg set publishConfig.provenance=false - uses: JS-DevTools/npm-publish@v3 with: token: ${{ secrets.GITHUB_TOKEN }} From de51c8ccb2bb04a1694bf296f4d772b85c34c36d Mon Sep 17 00:00:00 2001 From: dharveykpler <172981491+dharveykpler@users.noreply.github.com> Date: Tue, 22 Apr 2025 17:20:02 +0100 Subject: [PATCH 4/7] fix: test package json --- .github/workflows/dry-run.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/dry-run.yaml b/.github/workflows/dry-run.yaml index 1ad6a8c..f504133 100644 --- a/.github/workflows/dry-run.yaml +++ b/.github/workflows/dry-run.yaml @@ -21,7 +21,8 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} - #- run: npm pkg set publishConfig.provenance=false + - run: npm pkg set publishConfig.provenance=false + - run: cat package.json - uses: JS-DevTools/npm-publish@v3 with: token: ${{ secrets.GITHUB_TOKEN }} From 67a36df93f0ff1e77f334e28eeffd8d4cf546f43 Mon Sep 17 00:00:00 2001 From: dharveykpler <172981491+dharveykpler@users.noreply.github.com> Date: Tue, 22 Apr 2025 17:21:59 +0100 Subject: [PATCH 5/7] fix: remove debug log --- .github/workflows/dry-run.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/dry-run.yaml b/.github/workflows/dry-run.yaml index f504133..78bb293 100644 --- a/.github/workflows/dry-run.yaml +++ b/.github/workflows/dry-run.yaml @@ -22,7 +22,6 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} - run: npm pkg set publishConfig.provenance=false - - run: cat package.json - uses: JS-DevTools/npm-publish@v3 with: token: ${{ secrets.GITHUB_TOKEN }} From 686f96f2a8cb7655d23d4baa18ad9c054aefdc01 Mon Sep 17 00:00:00 2001 From: dharveykpler <172981491+dharveykpler@users.noreply.github.com> Date: Tue, 22 Apr 2025 17:22:45 +0100 Subject: [PATCH 6/7] fix: disable provenance for github package releases --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0555c9e..b9722e1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,6 +23,7 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + - run: npm pkg set publishConfig.provenance=false - uses: JS-DevTools/npm-publish@v3 with: token: ${{ secrets.GITHUB_TOKEN }} From 2f67074c915587bfbbd31d9a0eb89cce6308d223 Mon Sep 17 00:00:00 2001 From: dharveykpler <172981491+dharveykpler@users.noreply.github.com> Date: Tue, 22 Apr 2025 17:27:15 +0100 Subject: [PATCH 7/7] fix: remove dry-run --- .github/workflows/dry-run.yaml | 30 ------------------------------ 1 file changed, 30 deletions(-) delete mode 100644 .github/workflows/dry-run.yaml diff --git a/.github/workflows/dry-run.yaml b/.github/workflows/dry-run.yaml deleted file mode 100644 index 78bb293..0000000 --- a/.github/workflows/dry-run.yaml +++ /dev/null @@ -1,30 +0,0 @@ -name: Dry Run - -permissions: - contents: write # to be able to publish a GitHub release - id-token: write # to enable use of OIDC for npm provenance - packages: write - -on: - pull_request: - -jobs: - dry-run-release: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 - with: - node-version: '22.x' - - run: npm ci - - run: npx semantic-release --dry-run - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} - - run: npm pkg set publishConfig.provenance=false - - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.GITHUB_TOKEN }} - registry: 'https://npm.pkg.github.com' - access: restricted - dry-run: 'true'