wip

Author: silesky

.buildkite/pipeline.yml

@@ -212,28 +212,6 @@ steps:
           key: "v1.1-cache-dev-{{ checksum 'yarn.lock' }}"
           paths: ['.yarn/cache/']
 
-  # Deploy and NPM publish releases
-  - label: '[Browser] Publish Packages to NPM :rocket:'
-    if: |
-      // Only run when Version Packages PR is merged in
-      build.message =~ /^Version Packages/ &&
-      build.branch == "master" &&
-      build.message !~ /\[skip\]/i
-    agents:
-      queue: v1
-    commands:
-      - npm config set "//registry.npmjs.org/:_authToken" $${NPM_TOKEN}
-      - git config --global user.name "buildkite-agent"
-      - git config --global user.email "[email protected]"
-      - echo "--- Install dependencies"
-      - PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 HUSKY=0 yarn install --immutable
-      - echo "+++ Release packages"
-      - yarn release
-    plugins:
-      - ssh://[email protected]/segmentio/cache-buildkite-plugin#v2.0.0:
-          key: "v1.1-cache-dev-{{ checksum 'yarn.lock' }}"
-          paths: ['.yarn/cache/']
-
   - label: 'Snyk :lock:'
     agents:
       queue: v1

.github/workflows/check-npm-token-permissions.yml

@@ -0,0 +1,37 @@
+name: Check NPM Publish Permissions
+
+on:
+  workflow_dispatch: # Allows manual triggering
+
+jobs:
+  check-npm-permissions:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: 18
+          registry-url: 'https://registry.npmjs.org/'
+
+      - name: Check NPM Authentication
+        run: |
+          npm whoami --registry=https://registry.npmjs.org/ || echo "Not authenticated"
+
+      - name: Check Publish Access
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          PACKAGE_NAME: "@segment/analytics-signals"
+        run: |
+          echo "Checking permissions for package: $PACKAGE_NAME"
+          curl -H "Authorization: Bearer $NPM_TOKEN" \
+               https://registry.npmjs.org/-/package/$PACKAGE_NAME/access || echo "No access or invalid token"
+
+      - name: Dry-Run Publish
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: |
+          echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
+          npm publish --dry-run || echo "Publish not allowed"

.github/workflows/release-creator.yml

@@ -12,7 +12,7 @@ concurrency: ${{ github.workflow }}-${{ github.ref }}
 
 jobs:
   release-pr:
-    name: Create or Update Release PR
+    name: Create Release Pull Request or Publish to npm
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
@@ -30,10 +30,12 @@ jobs:
       - name: Install Dependencies
         run: PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 HUSKY=0 yarn install --immutable
 
-      - name: Create or Update Release PR
+      - name: Create Release Pull Request or Publish to npm
         id: changesets
         uses: changesets/action@v1
         with:
           version: yarn update-versions-and-changelogs
+          publish: yarn release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

RELEASING.md

@@ -50,14 +50,22 @@ Information is in the [@changesets automation instructions](https://github.com/c
 [Check out the @changesets automation instructions](https://github.com/changesets/changesets/blob/main/docs/automating-changesets.md#automating-changesets)
 
 ### What does `yarn release` do?
-- run prepare scripts
-- publish all packages to npm
-- pushes tags to repo
-- triggers a github release on CI (via tags)
-- triggers a CDN release
+1. Run prepare scripts
+2. Publish all packages to npm
+3. Pushes _all_ tags to github (e.g. "@segment/analytics-next@1.7.0", "@segment/analytics-node@1.2.3", etc)
 
-### I don't want to use automation, how do I manually create a release?
+### How do I fix the repo if all the packages were published, but the CI Failed to update the [github releases page](https://github.com/segmentio/analytics-next/releases)?
+```bash
+# checkout master so the HEAD is pointing to the "Version Packages" PR
+git co master && git pull --ff-only
 
+# Reads from the current tags and create github releases
+export GITHUB_TOKEN="???"
+yarn scripts create-release-from-tags
+```
+
+
+### I don't want to use automation, how do I manually create a release?
 ```bash
 export GITHUB_TOKEN="???" ## changelog generator requirement (https://github.com/settings/tokens)