FilesExpand file tree

develop

/

propose-release-notes.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

85 lines (77 loc) · 3.1 KB

develop

/

propose-release-notes.yml

Copy path

Top

File metadata and controls

• Code
• Blame

85 lines (77 loc) · 3.1 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

name: Propose release notes

# Runs after backfill-release-notes lands the raw semantic-release block in the

# GitHub Release body. Re-derives that block, asks Claude to rewrite it into

# user-centric notes per tools/release/release-notes-prompt.md, and opens a PR

# adding release-notes/v<VERSION>.md. Merging the PR triggers

# apply-release-notes.yml, which pushes the file's contents to the GH Release.

#

# Stable releases only on the automatic release pipeline — prerelease tags

# (-beta./-alpha.) keep the raw body unless this workflow is triggered

# manually from the Actions tab (workflow_dispatch).

on:

workflow_call:

inputs:

tag:

description: Release tag to propose notes for (e.g. v2.101.0)

required: true

type: string

non_blocking:

description: Do not fail the workflow run when proposing fails (release pipeline)

required: false

type: boolean

default: false

secrets:

ANTHROPIC_API_KEY:

required: true

GH_APP_PRIVATE_KEY:

required: true

DF_FIREWALL_TOKEN:

required: false

workflow_dispatch:

inputs:

tag:

description: Release tag to propose notes for (e.g. v2.101.0 or v2.99.0-beta.1)

required: true

type: string

permissions:

contents: read

jobs:

propose:

# workflow_call (release pipeline): skip prereleases. workflow_dispatch:

# allow any tag so reviewers can opt in for beta/alpha from the Actions tab.

if: ${{ github.event_name == 'workflow_dispatch' || (!contains(inputs.tag, '-beta.') && !contains(inputs.tag, '-alpha.')) }}

runs-on: ubuntu-latest

timeout-minutes: 45

continue-on-error: ${{ inputs.non_blocking || false }}

permissions:

contents: write

pull-requests: write

env:

TAG: ${{ inputs.tag }}

ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}

steps:

# App token gets us push to a protected default branch *and* PR creation

# under the App identity, matching the rest of release.yml.

- id: app-token

uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0

with:

client-id: ${{ vars.GH_APP_CLIENT_ID }}

private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}

- uses: useblacksmith/checkout@6fd481652155169ed4d2f25ebaf97464f685175f # v1

with:

# Full history + tags so backfill-release-notes.ts can reach the

# commit graph it needs (semantic-release walks notes back to the

# last release on the channel).

fetch-depth: 0

token: ${{ steps.app-token.outputs.token }}

- uses: ./.github/actions/setup

with:

dependency-firewall-token: ${{ secrets.DF_FIREWALL_TOKEN }}

- name: Configure git identity

run: |

git config user.name "github-actions[bot]"

git config user.email "41898282+github-actions[bot]@users.noreply.github.com"

- name: Propose release notes

env:

GH_TOKEN: ${{ steps.app-token.outputs.token }}

run: pnpm exec bun apps/cli/scripts/propose-release-notes.ts --tag "${TAG}" --apply