ci: make Gitea release workflow self-contained
Some checks failed
npm release / verify (push) Failing after 10s
npm release / publish to npm (push) Has been skipped

This commit is contained in:
2026-05-11 13:56:39 +09:00
parent 96d0568197
commit 0dc657c97b

View File

@@ -1,45 +1,48 @@
name: npm release name: npm release
env:
HOME: /tmp
on: on:
push: push:
tags: tags:
- 'v*' - 'v*'
- '[0-9]*' - '[0-9]*'
permissions:
contents: read
jobs: jobs:
verify: verify:
name: verify name: verify
runs-on: ubuntu-latest runs-on: ubuntu-latest
container:
image: node:20-bookworm
timeout-minutes: 20 timeout-minutes: 20
steps: steps:
- name: Check out repository - name: Install release tools
uses: actions/checkout@v4 run: |
with: set -euo pipefail
fetch-depth: 0 apt-get update
apt-get install -y git curl ca-certificates
curl -fsSL https://bun.sh/install | bash -s -- bun-v1.3.13
install -m 0755 /root/.bun/bin/bun /usr/local/bin/bun
node --version
npm --version
bun --version
- name: Set up Node.js - name: Clone tagged source
uses: actions/setup-node@v4 run: |
with: set -euo pipefail
node-version: '20' REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
registry-url: 'https://registry.npmjs.org' AUTH_HEADER="$(printf '%s' '${{ gitea.actor }}:${{ secrets.GITEA_TOKEN }}' | base64 -w0)"
git -c http.extraHeader="Authorization: Basic $AUTH_HEADER" clone --depth 1 --branch "${{ gitea.ref_name }}" "$REPO_URL" repo
- name: Set up Bun git -C repo rev-parse HEAD
uses: oven-sh/setup-bun@v2
with:
bun-version: '1.3.13'
- name: Install dependencies
run: bun install --frozen-lockfile
- name: Verify release tag matches package version - name: Verify release tag matches package version
working-directory: repo
shell: bash shell: bash
run: | run: |
set -euo pipefail set -euo pipefail
TAG_NAME="${GITHUB_REF##refs/tags/}" TAG_NAME="${{ gitea.ref_name }}"
PACKAGE_VERSION="$(node -p "require('./package.json').version")" PACKAGE_VERSION="$(node -p "require('./package.json').version")"
if [ "$TAG_NAME" = "v$PACKAGE_VERSION" ] || [ "$TAG_NAME" = "$PACKAGE_VERSION" ]; then if [ "$TAG_NAME" = "v$PACKAGE_VERSION" ] || [ "$TAG_NAME" = "$PACKAGE_VERSION" ]; then
@@ -51,7 +54,10 @@ jobs:
exit 1 exit 1
- name: Run verify pipeline - name: Run verify pipeline
working-directory: repo
run: | run: |
set -euo pipefail
bun install --frozen-lockfile
bun run test bun run test
bun run check bun run check
bun run build bun run build
@@ -59,32 +65,48 @@ jobs:
release: release:
name: publish to npm name: publish to npm
runs-on: ubuntu-latest runs-on: ubuntu-latest
container:
image: node:20-bookworm
timeout-minutes: 20 timeout-minutes: 20
needs: needs:
- verify - verify
steps: steps:
- name: Check out repository - name: Install release tools
uses: actions/checkout@v4 run: |
set -euo pipefail
apt-get update
apt-get install -y git curl ca-certificates
curl -fsSL https://bun.sh/install | bash -s -- bun-v1.3.13
install -m 0755 /root/.bun/bin/bun /usr/local/bin/bun
node --version
npm --version
bun --version
- name: Set up Node.js - name: Clone tagged source
uses: actions/setup-node@v4 run: |
with: set -euo pipefail
node-version: '20' REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
registry-url: 'https://registry.npmjs.org' AUTH_HEADER="$(printf '%s' '${{ gitea.actor }}:${{ secrets.GITEA_TOKEN }}' | base64 -w0)"
git -c http.extraHeader="Authorization: Basic $AUTH_HEADER" clone --depth 1 --branch "${{ gitea.ref_name }}" "$REPO_URL" repo
- name: Set up Bun git -C repo rev-parse HEAD
uses: oven-sh/setup-bun@v2
with:
bun-version: '1.3.13'
- name: Install dependencies - name: Install dependencies
run: bun install --frozen-lockfile working-directory: repo
run: |
set -euo pipefail
bun install --frozen-lockfile
- name: Build package - name: Build package
run: bun run build working-directory: repo
run: |
set -euo pipefail
bun run build
- name: Publish package to npm - name: Publish package to npm
working-directory: repo
env: env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
run: npm publish run: |
set -euo pipefail
npm publish