Repository navigation
app-release: reusable workflow — tag + prerelease an app version (no bot key) - #3
Merged
Merged
Conversation
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
…sing The announcer relays app-released after release.published, so the reusable workflow only tags and publishes with GITHUB_TOKEN: the bot-token and dispatch steps, bot-app-id and bot-private-key are gone. The scripts checkout uses refs/tags/v1 (a branch named v1 can no longer shadow it). While a repo has no vX.Y.Z tag only a push that bumps the version publishes; workflow_dispatch and new-branch pushes are no-ops. Versions refuse leading zeros and non-ASCII digits; bad JSON, non-object manifests and non-string changelogs end in a clean ::error:: (exit 1). The script runs with python3 -I and GIT_CONFIG_GLOBAL=/dev/null. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Phase 3 of the release automation (spec + plan: CrossPad/platform-idf#46).
A reusable
workflow_callthat the 13 app repos call@v1:crosspad-app.json(checked againstlibrary.json);vX.Y.Z, and publishes a GitHub prerelease withGITHUB_TOKEN;app-releasedto crosspad-apps (CrossPad/crosspad-announcer, separate PR).Security (from review):
refs/tags/v1, so a branch namedv1cannot shadow them;persist-credentials: false,python3 -I,GIT_CONFIG_GLOBAL=/dev/null;X.Y.Z, no leading zeros) and reach the script through env.No backfill: while an app has no release tag, only a push that actually bumped the version publishes. A dispatch, an unchanged version, a new branch or an unknown
beforedoes nothing, so there is no burst of 🌙 pings.Tests: 53 passed (pytest). actionlint clean.
After merge: an admin creates tag
v1on the merge commit, and rulesets protectrefs/tags/v*andrefs/heads/v*(admin only).🤖 Generated with Claude Code