Dev #35
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,8 +1,6 @@ | ||
| name: Release | ||
|
|
||
| on: | ||
| workflow_dispatch: | ||
|
Comment on lines
3
to
7
Contributor
There was a problem hiding this comment. 🧩 Analysis chain🏁 Script executed: git ls-files ".github/workflows/*.yml"Repository: FROSTR-ORG/igloo-server Length of output: 154 🏁 Script executed: cat -n ".github/workflows/release.yml"Repository: FROSTR-ORG/igloo-server Length of output: 7399 Don't trigger release workflow on every push to master without versioning changes. Every push to 🤖 Prompt for AI Agents |
||
| inputs: | ||
| version: | ||
|
|
@@ -13,7 +11,7 @@ on: | |
| jobs: | ||
| release: | ||
| runs-on: ubuntu-latest | ||
| if: github.ref == 'refs/heads/main' && github.event_name == 'workflow_dispatch' | ||
|
AustinKelsay marked this conversation as resolved.
Outdated
|
||
| permissions: | ||
| contents: write | ||
| pull-requests: write | ||
|
|
@@ -31,7 +29,7 @@ jobs: | |
| - name: Setup Bun | ||
| uses: oven-sh/setup-bun@v2 | ||
| with: | ||
| bun-version: 1.3.10 | ||
|
|
||
| - name: Install dependencies | ||
| run: bun install --frozen-lockfile | ||
|
|
@@ -73,6 +71,12 @@ jobs: | |
| echo "new_version=$NEW_VERSION" >> $GITHUB_OUTPUT | ||
| echo "version_number=${NEW_VERSION#v}" >> $GITHUB_OUTPUT | ||
|
|
||
| - name: Type check | ||
| run: bun run tsc --noEmit | ||
|
|
||
| - name: Run test suite | ||
| run: bun test | ||
|
|
||
| - name: Build application | ||
| run: bun run build | ||
|
|
||
|
|
@@ -83,25 +87,56 @@ jobs: | |
| echo "# CHANGELOG" > CHANGELOG.md | ||
| echo "" >> CHANGELOG.md | ||
| fi | ||
|
|
||
| VERSION="${{ steps.new_version.outputs.version_number }}" | ||
| DATE=$(date +%Y-%m-%d) | ||
| if ! grep -Fq "## [${VERSION}]" CHANGELOG.md; then | ||
| awk -v version="$VERSION" -v date="$DATE" ' | ||
| NR == 1 { print; print ""; print "## [" version "] - " date; print ""; next } | ||
| { print } | ||
| ' CHANGELOG.md > CHANGELOG.md.tmp | ||
| mv CHANGELOG.md.tmp CHANGELOG.md | ||
| fi | ||
|
|
||
| temp_changelog="$(mktemp)" | ||
|
|
||
| # Add commit messages since last tag (safe for special chars in subjects) | ||
| LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "") | ||
| if [ -n "$LAST_TAG" ]; then | ||
| printf '### Changes since %s:\n' "$LAST_TAG" > "$temp_changelog" | ||
| git log --pretty=format:'%s%x00' "$LAST_TAG..HEAD" \ | ||
| | tr '\0' '\n' \ | ||
| | awk 'NF { print "- " $0 }' >> "$temp_changelog" | ||
| else | ||
| printf '### Changes:\n' > "$temp_changelog" | ||
| git log --pretty=format:'%s%x00' -n 10 \ | ||
| | tr '\0' '\n' \ | ||
| | awk 'NF { print "- " $0 }' >> "$temp_changelog" | ||
| fi | ||
| printf '\n' >> "$temp_changelog" | ||
|
|
||
| # Insert changes into changelog after the current version heading | ||
| awk -v target="## [${VERSION}]" -v insert_file="$temp_changelog" ' | ||
| { print } | ||
| $0 == target && !inserted { | ||
| while ((getline line < insert_file) > 0) print line | ||
| close(insert_file) | ||
|
AustinKelsay marked this conversation as resolved.
Outdated
|
||
| inserted = 1 | ||
| } | ||
| ' CHANGELOG.md > CHANGELOG.md.tmp | ||
| mv CHANGELOG.md.tmp CHANGELOG.md | ||
| rm -f "$temp_changelog" | ||
|
|
||
| - name: Commit release metadata | ||
| run: | | ||
| TAG="${{ steps.new_version.outputs.new_version }}" | ||
| git add package.json bun.lock CHANGELOG.md | ||
| if git diff --cached --quiet; then | ||
| echo "No release metadata changes to commit" | ||
| else | ||
| git commit -m "chore(release): ${TAG}" | ||
| git push origin HEAD:${GITHUB_REF_NAME} | ||
| fi | ||
|
|
||
| - name: Create release archive | ||
| run: | | ||
|
|
@@ -122,28 +157,30 @@ jobs: | |
| --exclude=.git \ | ||
| --exclude=release \ | ||
| --exclude=frontend \ | ||
| src static package.json bun.lock tsconfig.json Dockerfile compose.yml README.md LICENSE | ||
|
|
||
| - name: Create release tag | ||
| run: | | ||
| TAG="${{ steps.new_version.outputs.new_version }}" | ||
| git fetch --tags origin | ||
| if git rev-parse -q --verify "refs/tags/${TAG}" >/dev/null; then | ||
| echo "Tag ${TAG} already exists, skipping tag creation" | ||
| else | ||
| git tag "${TAG}" | ||
| git push origin "${TAG}" | ||
| fi | ||
|
AustinKelsay marked this conversation as resolved.
|
||
|
|
||
| - name: Create GitHub release and upload assets | ||
| uses: softprops/action-gh-release@v2 | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| with: | ||
| tag_name: ${{ steps.new_version.outputs.new_version }} | ||
| name: Release ${{ steps.new_version.outputs.new_version }} | ||
| body: | | ||
| ## Changes in ${{ steps.new_version.outputs.new_version }} | ||
|
|
||
| See [CHANGELOG.md](https://github.com/FROSTR-ORG/igloo-server/blob/main/CHANGELOG.md) for full details. | ||
|
|
||
| ### Installation | ||
|
|
||
|
|
@@ -162,36 +199,21 @@ jobs: | |
| ``` | ||
| draft: false | ||
| prerelease: false | ||
| files: | | ||
| ./release/igloo-server-${{ steps.new_version.outputs.version_number }}-src.tar.gz | ||
| ./release/igloo-server-${{ steps.new_version.outputs.version_number }}.tar.gz | ||
|
|
||
| docker: | ||
| runs-on: ubuntu-latest | ||
| needs: release | ||
| permissions: | ||
| packages: write | ||
|
|
||
| steps: | ||
| - name: Checkout code | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| ref: refs/tags/${{ needs.release.outputs.new_version }} | ||
|
Comment on lines
+132
to
+139
Contributor
There was a problem hiding this comment. 🧩 Analysis chain🏁 Script executed: cat -n .github/workflows/release.yml | head -160 | tail -50Repository: FROSTR-ORG/igloo-server Length of output: 1977 🏁 Script executed: # Get the full context of the docker job
sed -n '100,150p' .github/workflows/release.ymlRepository: FROSTR-ORG/igloo-server Length of output: 1682 🏁 Script executed: # Check if there are any other permission patterns in the file
grep -n "permissions:" .github/workflows/release.yml -A 3Repository: FROSTR-ORG/igloo-server Length of output: 227 🌐 Web query:
💡 Result:
permissions:
contents: readOtherwise the checkout step can fail because any permission you don’t list is set to Notes:
Citations:
🏁 Script executed: # Check if there are any comments or documentation in the workflow file itself
grep -i "permission\|token\|contents\|read" .github/workflows/release.yml | head -20Repository: FROSTR-ORG/igloo-server Length of output: 438 Restore repository read permission in the Docker job. Job-level 🔧 Minimal fix docker:
runs-on: ubuntu-latest
needs: release
permissions:
+ contents: read
packages: write🤖 Prompt for AI Agents |
||
|
|
||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@v3 | ||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.