PodNotes/.github/workflows/release.yml at master · chhoumann/PodNotes · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
# Caller stub: release (stage 3). Worked example for podnotes (npm, docs build).
# Copy to .github/workflows/release.yml and edit the per-repo values.
#
# workflow_dispatch is the only trigger: the reusable validate workflow (stage 2)
# dispatches this on the durable release-run/<version> recovery branch. Keeping a
# plain workflow_dispatch here also makes the release itself replayable for
# recovery without re-running the whole pipeline.

name: Release

on:
  workflow_dispatch:
    inputs:
      releasePr:
        description: "Merged machine-generated release PR number to recover"
        required: true
        type: string

permissions: {}

concurrency:
  group: release
  cancel-in-progress: false

jobs:
  release:
    permissions:
      actions: read
      attestations: write
      contents: write
      id-token: write
      pull-requests: read
    uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release.yml@d6b3b8c2cf460059238043b32a08dcaa3be4828f # v5.0.0
    with:
      release-pr: ${{ inputs.releasePr }}
      plugin-name: podnotes
      package-manager: npm
      # Must match the release-policy pinned in release-prepare.yml.
      release-policy: '[{"scope":"deps","type":"build","release":"patch"}]'
      default-branch: master
      node-version: "22"
      release-bot-app-slug: podnotes-release-bot
      release-assets: '["main.js","manifest.json"]'
      verify-commands: |
        npm run lint
        npm run format:check
        npm run typecheck
        npm run test
        npm run docs:build
    secrets:
      # Optional: unset secrets resolve to '' and the notify job skips them.
      slack-webhook: ${{ secrets.SLACK_WEBHOOK }}
      discord-webhook: ${{ secrets.DISCORD_WEBHOOK }}