FilesExpand file tree

main

/

publish-sim-setup.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

169 lines (147 loc) · 5.75 KB

main

/

publish-sim-setup.yml

Copy path

Top

File metadata and controls

• Code
• Blame

169 lines (147 loc) · 5.75 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

name: publish-sim-setup

on:

push:

branches: [main, staging, dev]

paths:

- 'packages/sim-setup/**'

- 'packages/deployment-config/**'

- 'packages/security/**'

- 'packages/utils/**'

- 'docker-compose.prod.yml'

- 'bun.lock'

permissions:

contents: read

concurrency:

group: publish-sim-setup-${{ github.ref }}

cancel-in-progress: false

jobs:

publish:

name: publish

runs-on: ${{ (vars.CI_PROVIDER == '' || vars.CI_PROVIDER == 'blacksmith') && 'blacksmith-4vcpu-ubuntu-2404' || 'ubuntu-latest' }}

timeout-minutes: 15

steps:

- name: Checkout repository

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6

with:

persist-credentials: false

# Vitest 5 requires Node 22.12+; the published bundle is still

# smoke-tested on Node 20 below, its minimum supported runtime.

- name: Setup workspace

uses: ./.github/actions/setup

with:

provider: ${{ vars.CI_PROVIDER }}

node-version: '22'

- name: Verify npm authentication

env:

NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}

run: bun pm whoami

- name: Auto-bump package version

run: bun run bump:npm-packages sim-setup

- name: Check generated deployment config

run: bun run check:deployment-config

- name: Run tests

working-directory: packages/sim-setup

run: bun run test

- name: Type-check packages

run: |

bun run --cwd packages/deployment-config type-check

bun run --cwd packages/sim-setup type-check

- name: Build package

working-directory: packages/sim-setup

run: bun run build

- name: Resolve release channel

id: release

working-directory: packages/sim-setup

env:

BRANCH: ${{ github.ref_name }}

run: |

BASE_VERSION="$(bun -p "require('./package.json').version")"

if [[ ! "$BASE_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then

echo "Package version must be a stable X.Y.Z base, got '$BASE_VERSION'." >&2

exit 1

fi

case "$BRANCH" in

dev)

VERSION="${BASE_VERSION}-dev.${GITHUB_RUN_NUMBER}.${GITHUB_RUN_ATTEMPT}"

TAG="dev"

;;

staging)

VERSION="${BASE_VERSION}-preview.${GITHUB_RUN_NUMBER}.${GITHUB_RUN_ATTEMPT}"

TAG="staging"

;;

main)

VERSION="$BASE_VERSION"

TAG="latest"

;;

*)

echo "Unsupported release branch '$BRANCH'." >&2

exit 1

;;

esac

bun pm pkg set "version=$VERSION"

RESOLVED_VERSION="$(bun -p "require('./package.json').version")"

if [ "$RESOLVED_VERSION" != "$VERSION" ]; then

echo "Version injection mismatch: wanted '$VERSION', got '$RESOLVED_VERSION'." >&2

exit 1

fi

{

echo "version=$VERSION"

echo "tag=$TAG"

} >> "$GITHUB_OUTPUT"

- name: Setup Node 20 for the bundle smoke test

uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6

with:

node-version: '20'

- name: Smoke-test packed Node bundle

working-directory: packages/sim-setup

run: |

set -euo pipefail

SMOKE_DIR="$(mktemp -d "$RUNNER_TEMP/sim-setup-smoke.XXXXXX")"

PACKAGE_PATH="$SMOKE_DIR/sim-setup.tgz"

bun pm pack --ignore-scripts --filename "$PACKAGE_PATH" --quiet

tar -xzf "$PACKAGE_PATH" -C "$SMOKE_DIR"

if tar -tzf "$PACKAGE_PATH" | grep -Eq '^package/(apps|docker|helm|packages|scripts)/'; then

echo 'Packed setup package contains repository source directories.' >&2

exit 1

fi

test -x "$SMOKE_DIR/package/dist/index.js"

test -f "$SMOKE_DIR/package/dist/docker-compose.prod.yml"

if grep -Eq '^[[:space:]]+(build|context):' "$SMOKE_DIR/package/dist/docker-compose.prod.yml"; then

echo 'Production Compose asset contains a local build dependency.' >&2

exit 1

fi

cd "$SMOKE_DIR"

node package/dist/index.js --version

node package/dist/index.js --help

for command in config add doctor start stop restart update status logs down reset; do

node package/dist/index.js "$command" --help > /dev/null

done

node package/dist/index.js add integration --help > /dev/null

if node package/dist/index.js --quik > /dev/null 2>&1; then

echo 'Packed setup CLI accepted an unknown option.' >&2

exit 1

fi

if node package/dist/index.js start extra > /dev/null 2>&1; then

echo 'Packed setup CLI accepted an extra lifecycle operand.' >&2

exit 1

fi

- name: Verify version is unpublished

working-directory: packages/sim-setup

env:

VERSION: ${{ steps.release.outputs.version }}

run: |

if bun pm view "sim-setup@$VERSION" version > /dev/null 2>&1; then

echo "sim-setup@$VERSION is already published. The automatic version bump did not produce a unique release." >&2

exit 1

fi

- name: Publish to npm

working-directory: packages/sim-setup

env:

NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}

NPM_TAG: ${{ steps.release.outputs.tag }}

run: bun publish --access public --tag "$NPM_TAG" --no-save

- name: Summarize release

env:

VERSION: ${{ steps.release.outputs.version }}

NPM_TAG: ${{ steps.release.outputs.tag }}

run: echo "Published sim-setup@$VERSION with the '$NPM_TAG' tag."