chore: bump nuwax-codex to ^0.17.3, release v1.2.2 #38
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Publish a stable release of nuwax-codex-acp to npm (latest dist-tag). | |
| # Triggered by pushing a non-beta v*.*.* tag (e.g. v1.1.8) or manually. | |
| # tag patterns cannot reliably distinguish v1.1.7 from v1.1.7-beta.1. | |
| # The "Reject beta tags" step below is the guard. | |
| name: Release | |
| on: | |
| push: | |
| tags: | |
| - 'v*' | |
| workflow_dispatch: | |
| inputs: | |
| tag_name: | |
| description: 'Tag name (e.g. v1.1.8)' | |
| required: false | |
| type: string | |
| permissions: | |
| contents: write | |
| jobs: | |
| verify: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - name: Reject beta tags | |
| shell: bash | |
| run: | | |
| TAG_NAME="${{ github.event.inputs.tag_name || github.ref_name }}" | |
| if [[ "$TAG_NAME" == *-beta* ]]; then | |
| echo "::error::Tag '$TAG_NAME' is a beta pre-release. Use publish-beta.yml instead." | |
| exit 1 | |
| fi | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: '24' | |
| - name: Configure sandboxing | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install --yes bubblewrap | |
| sudo sysctl -w kernel.unprivileged_userns_clone=1 | |
| if [ -f /proc/sys/kernel/apparmor_restrict_unprivileged_userns ]; then | |
| sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 | |
| fi | |
| - run: npm install | |
| - run: npm run typecheck | |
| publish-to-npm: | |
| needs: verify | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: '24' | |
| registry-url: 'https://registry.npmjs.org' | |
| - run: npm install | |
| - run: npm publish --access public | |
| env: | |
| NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| create-release: | |
| needs: publish-to-npm | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - name: Create Release | |
| uses: softprops/action-gh-release@v1 | |
| with: | |
| generate_release_notes: true |