rename the secret to GH_PUSH_TOKEN

fadi-george · fadi-george · commit cd465d682d82 · 2025-12-23T16:25:24.000-08:00
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -13,53 +13,51 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: '[Setup] Checkout Repository'
-        uses: actions/checkout@v3
-        with:
-          persist-credentials: false
-          token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+        uses: actions/checkout@v6
+
       - name: '[Setup] Node'
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
           node-version: 18
+
       - name: '[Setup] Bootstrap Dependencies'
-        run: bash scripts/bootstrap-dependencies
+        run: npm ci
+
       - name: '[Setup] Git'
         run: |
           git config --global user.email "noreply@onesignal.com"
           git config --global user.name "OneSignal"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+
       - name: 'Get current web-shim-codegen version'
         run: |
           echo "PACKAGE_VERSION=$(node -p "require('./package.json').version")" >> $GITHUB_ENV
+
       - name: '[Setup] Build'
         run: npm run build
+
       - name: '[onesignal-ngx] Checkout'
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
-          token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          token: ${{ secrets.GH_PUSH_TOKEN }}
           repository: OneSignal/onesignal-ngx
           fetch-depth: 0
           path: __clone/onesignal-ngx
+
       - name: '[onesignal-ngx] Patch'
         run: |
-          bash scripts/clean-repo.sh __clone/onesignal-ngx package-lock.json
-          tar zxvvf dist/onesignal-ngx.tgz -C __clone/
-          cd __clone/onesignal-ngx
-          git add -A
-          if git commit -m "feat: sync with web-shim-codegen v${{ env.PACKAGE_VERSION }}"; then
-            echo "onesignal-ngx repository has been updated"
-          else
-            echo "onesignal-ngx repository has NOT been updated, no changes to commit"
-          fi
+          bash scripts/patch-repo.sh dist/onesignal-ngx.tgz __clone/onesignal-ngx onesignal-ngx
+        env:
+          PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
+
       - name: '[onesignal-ngx] Push'
         uses: ad-m/github-push-action@v0.6.0
         with:
           repository: OneSignal/onesignal-ngx
           directory: __clone/onesignal-ngx
           force: true
           branch: cd_update
-          github_token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          github_token: ${{ secrets.GH_PUSH_TOKEN }}
+
       - name: '[onesignal-ngx] Submit PR'
         uses: octokit/request-action@v2.x
         continue-on-error: true
@@ -72,34 +70,32 @@ jobs:
           title: 'sync with web-shim-codegen v${{ env.PACKAGE_VERSION }}'
           body: 'This update was generated by the GitHub CD action.'
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GH_PUSH_TOKEN }}
+
       - name: '[react-onesignal] Checkout'
         uses: actions/checkout@v3
         with:
-          token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          token: ${{ secrets.GH_PUSH_TOKEN }}
           repository: OneSignal/react-onesignal
           fetch-depth: 0
           submodules: true
           path: __clone/react
+
       - name: '[react-onesignal] Patch'
         run: |
-          bash scripts/clean-repo.sh __clone/react
-          tar zxvvf dist/react.tgz -C __clone/
-          cd __clone/react
-          git add -A
-          if git commit -m "feat: sync with web-shim-codegen v${{ env.PACKAGE_VERSION }}"; then
-            echo "react-onesignal repository has been updated"
-          else
-            echo "react-onesignal repository has NOT been updated, no changes to commit"
-          fi
+          bash scripts/patch-repo.sh dist/react.tgz __clone/react react-onesignal
+        env:
+          PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
+
       - name: '[react-onesignal] Push'
         uses: ad-m/github-push-action@v0.6.0
         with:
           repository: OneSignal/react-onesignal
           directory: __clone/react
           force: true
           branch: cd_update
-          github_token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          github_token: ${{ secrets.GH_PUSH_TOKEN }}
+
       - name: '[react-onesignal] Submit PR'
         uses: octokit/request-action@v2.x
         continue-on-error: true
@@ -112,33 +108,31 @@ jobs:
           title: 'sync with web-shim-codegen v${{ env.PACKAGE_VERSION }}'
           body: 'This update was generated by the GitHub CD action.'
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GH_PUSH_TOKEN }}
+
       - name: '[onesignal-vue] Checkout'
         uses: actions/checkout@v3
         with:
-          token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          token: ${{ secrets.GH_PUSH_TOKEN }}
           repository: OneSignal/onesignal-vue
           fetch-depth: 0
           path: __clone/vue/v2
+
       - name: '[onesignal-vue] Patch'
         run: |
-          bash scripts/clean-repo.sh __clone/vue/v2
-          tar zxvvf dist/vue/v2.tgz -C __clone/
-          cd __clone/vue/v2
-          git add -A
-          if git commit -m "feat: sync with web-shim-codegen v${{ env.PACKAGE_VERSION }}"; then
-            echo "onesignal-vue repository has been updated"
-          else
-            echo "onesignal-vue repository has NOT been updated, no changes to commit"
-          fi
+          bash scripts/patch-repo.sh dist/vue/v2.tgz __clone/vue/v2 onesignal-vue
+        env:
+          PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
+
       - name: '[onesignal-vue] Push'
         uses: ad-m/github-push-action@v0.6.0
         with:
           repository: OneSignal/onesignal-vue
           directory: __clone/vue/v2
           force: true
           branch: cd_update
-          github_token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          github_token: ${{ secrets.GH_PUSH_TOKEN }}
+
       - name: '[onesignal-vue] Submit PR'
         uses: octokit/request-action@v2.x
         continue-on-error: true
@@ -151,33 +145,31 @@ jobs:
           title: 'sync with web-shim-codegen v${{ env.PACKAGE_VERSION }}'
           body: 'This update was generated by the GitHub CD action.'
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GH_PUSH_TOKEN }}
+
       - name: '[onesignal-vue3] Checkout'
         uses: actions/checkout@v3
         with:
-          token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          token: ${{ secrets.GH_PUSH_TOKEN }}
           repository: OneSignal/onesignal-vue3
           fetch-depth: 0
           path: __clone/vue/v3
+
       - name: '[onesignal-vue3] Patch'
         run: |
-          bash scripts/clean-repo.sh __clone/vue/v3
-          tar zxvvf dist/vue/v3.tgz -C __clone/
-          cd __clone/vue/v3
-          git add -A
-          if git commit -m "feat: sync with web-shim-codegen v${{ env.PACKAGE_VERSION }}"; then
-            echo "onesignal-vue3 repository has been updated"
-          else
-            echo "onesignal-vue3 repository has NOT been updated, no changes to commit"
-          fi
+          bash scripts/patch-repo.sh dist/vue/v3.tgz __clone/vue/v3 onesignal-vue3
+        env:
+          PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
+
       - name: '[onesignal-vue3] Push'
         uses: ad-m/github-push-action@v0.6.0
         with:
           repository: OneSignal/onesignal-vue3
           directory: __clone/vue/v3
           force: true
           branch: cd_update
-          github_token: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          github_token: ${{ secrets.GH_PUSH_TOKEN }}
+
       - name: '[onesignal-vue3] Submit PR'
         uses: octokit/request-action@v2.x
         continue-on-error: true
@@ -190,4 +182,4 @@ jobs:
           title: 'sync with web-shim-codegen v${{ env.PACKAGE_VERSION }}'
           body: 'This update was generated by the GitHub CD action.'
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_WEB_SHIM_PUSH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GH_PUSH_TOKEN }}
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "web-shim-codegen",
-  "version": "3.0.6",
+  "version": "3.0.7",
   "description": "Used to build Web SDK libraries for various web frameworks",
   "main": "index.js",
   "scripts": {
diff --git a/scripts/patch-repo.sh b/scripts/patch-repo.sh
@@ -0,0 +1,44 @@
+#!/bin/bash
+set -euo pipefail
+
+# Usage: patch-repo.sh <tar-file> <target-directory> <repo-name>
+# Example: patch-repo.sh dist/react.tgz __clone/react react-onesignal
+# Requires PACKAGE_VERSION environment variable to be set
+
+if [ $# -lt 3 ]; then
+  echo "Usage: $0 <tar-file> <target-directory> <repo-name>"
+  exit 1
+fi
+
+TAR_FILE="$1"
+TARGET_DIR="$2"
+REPO_NAME="$3"
+VERSION="${PACKAGE_VERSION:-unknown}"
+
+if [ ! -f "$TAR_FILE" ]; then
+  echo "Error: Tar file $TAR_FILE does not exist"
+  exit 1
+fi
+
+if [ ! -d "$TARGET_DIR" ]; then
+  echo "Error: Target directory $TARGET_DIR does not exist"
+  exit 1
+fi
+
+# Remove .github directory to ensure clean extraction
+cd "$TARGET_DIR"
+rm -rf .github
+cd - > /dev/null
+
+# Extract tar archive
+tar zxvvf "$TAR_FILE" -C "$(dirname "$TARGET_DIR")"
+
+# Add all changes and commit
+cd "$TARGET_DIR"
+git add -A
+if git commit -m "feat: sync with web-shim-codegen v$VERSION"; then
+  echo "$REPO_NAME repository has been updated"
+else
+  echo "$REPO_NAME repository has NOT been updated, no changes to commit"
+fi
+
diff --git a/src/static/.github/workflows/lint-pr-title.yml b/src/static/.github/workflows/lint-pr-title.yml
@@ -0,0 +1,14 @@
+# Checks if the PR title follows semantic commit message conventions
+name: Lint PR
+permissions:
+  contents: read
+  pull-requests: write
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize]
+
+jobs:
+  call:
+    uses: OneSignal/sdk-actions/.github/workflows/lint-pr-title.yml@main
+    secrets: inherit

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "web-shim-codegen",`
`3`		`- "version": "3.0.6",`
	`3`	`+ "version": "3.0.7",`
`4`	`4`	`"description": "Used to build Web SDK libraries for various web frameworks",`
`5`	`5`	`"main": "index.js",`
`6`	`6`	`"scripts": {`