FilesExpand file tree

main

/

publish-sim-cli.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

150 lines (131 loc) · 5.17 KB

main

/

publish-sim-cli.yml

Copy path

Top

File metadata and controls

• Code
• Blame

150 lines (131 loc) · 5.17 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

name: publish-sim-cli

on:

push:

branches: [main, staging, dev]

paths:

- 'packages/sim-cli/**'

# The build bundles its workspace dependencies, so a change there

# changes what ships.

- 'packages/utils/**'

# A change to how the package is built or published has to republish it.

- '.github/workflows/publish-sim-cli.yml'

permissions:

contents: read

concurrency:

group: publish-sim-cli-${{ github.ref }}

cancel-in-progress: false

jobs:

publish:

name: publish

runs-on: ${{ (vars.CI_PROVIDER == '' || vars.CI_PROVIDER == 'blacksmith') && 'blacksmith-4vcpu-ubuntu-2404' || 'ubuntu-latest' }}

timeout-minutes: 15

steps:

- name: Checkout repository

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6

with:

persist-credentials: false

# Vitest 5 requires Node 22.12+; the published bundle is still

# smoke-tested on Node 20 below, its minimum supported runtime.

- name: Setup workspace

uses: ./.github/actions/setup

with:

provider: ${{ vars.CI_PROVIDER }}

node-version: '22'

- name: Verify npm authentication

env:

NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}

run: bun pm whoami

- name: Auto-bump package version

run: bun run bump:npm-packages sim-cli

- name: Run tests

working-directory: packages/sim-cli

run: bun run test

- name: Type-check package

working-directory: packages/sim-cli

run: bun run type-check

# The usage-reporting destination is baked into the bundle at build time

# (docs/cli/usage-data), so only the two steps that build it get the

# token. Every other step, the tests above in particular, runs without

# it: a test that runs a real command must never report to production.

- name: Build package

working-directory: packages/sim-cli

env:

SIM_CLI_TELEMETRY_KEY: ${{ vars.SIM_CLI_TELEMETRY_KEY }}

SIM_CLI_TELEMETRY_HOST: ${{ vars.SIM_CLI_TELEMETRY_HOST }}

run: bun run build

- name: Resolve release channel

id: release

working-directory: packages/sim-cli

env:

BRANCH: ${{ github.ref_name }}

run: |

BASE_VERSION="$(bun -p "require('./package.json').version")"

if [[ ! "$BASE_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then

echo "Package version must be a stable X.Y.Z base, got '$BASE_VERSION'." >&2

exit 1

fi

case "$BRANCH" in

dev)

VERSION="${BASE_VERSION}-dev.${GITHUB_RUN_NUMBER}.${GITHUB_RUN_ATTEMPT}"

TAG="dev"

;;

staging)

VERSION="${BASE_VERSION}-preview.${GITHUB_RUN_NUMBER}.${GITHUB_RUN_ATTEMPT}"

TAG="staging"

;;

main)

VERSION="$BASE_VERSION"

TAG="latest"

;;

*)

echo "Unsupported release branch '$BRANCH'." >&2

exit 1

;;

esac

bun pm pkg set "version=$VERSION"

RESOLVED_VERSION="$(bun -p "require('./package.json').version")"

if [ "$RESOLVED_VERSION" != "$VERSION" ]; then

echo "Version injection mismatch: wanted '$VERSION', got '$RESOLVED_VERSION'." >&2

exit 1

fi

{

echo "version=$VERSION"

echo "tag=$TAG"

} >> "$GITHUB_OUTPUT"

- name: Setup Node 20 for the bundle smoke test

uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6

with:

node-version: '20'

- name: Smoke-test packed Node bundle

working-directory: packages/sim-cli

run: |

set -euo pipefail

SMOKE_DIR="$(mktemp -d "$RUNNER_TEMP/sim-cli-smoke.XXXXXX")"

PACKAGE_PATH="$SMOKE_DIR/sim-cli.tgz"

bun pm pack --ignore-scripts --filename "$PACKAGE_PATH" --quiet

tar -xzf "$PACKAGE_PATH" -C "$SMOKE_DIR"

"$SMOKE_DIR/package/dist/index.js" --version

- name: Verify version is unpublished

working-directory: packages/sim-cli

env:

VERSION: ${{ steps.release.outputs.version }}

run: |

if bun pm view "sim@$VERSION" version > /dev/null 2>&1; then

echo "sim@$VERSION is already published. The automatic version bump did not produce a unique release." >&2

exit 1

fi

# `bun publish` runs `prepublishOnly`, which rebuilds `dist`, and that

# rebuild is what ships, so it needs the token as well.

- name: Publish to npm

working-directory: packages/sim-cli

env:

NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}

NPM_TAG: ${{ steps.release.outputs.tag }}

SIM_CLI_TELEMETRY_KEY: ${{ vars.SIM_CLI_TELEMETRY_KEY }}

SIM_CLI_TELEMETRY_HOST: ${{ vars.SIM_CLI_TELEMETRY_HOST }}

run: bun publish --access public --tag "$NPM_TAG" --no-save

- name: Summarize release

env:

VERSION: ${{ steps.release.outputs.version }}

NPM_TAG: ${{ steps.release.outputs.tag }}

run: echo "Published sim@$VERSION with the '$NPM_TAG' tag."