Files
pnpm/.github/workflows/update-latest.yml
dependabot[bot] a5b1ac783f chore(deps): bump the github-actions group with 4 updates (#11854)
Bumps the github-actions group with 4 updates: [github/codeql-action](https://github.com/github/codeql-action), [taiki-e/install-action](https://github.com/taiki-e/install-action), [garnet-org/action](https://github.com/garnet-org/action) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action).


Updates `github/codeql-action` from 4.35.4 to 4.35.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](68bde559de...9e0d7b8d25)

Updates `taiki-e/install-action` from 2.78.0 to 2.78.1
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](e1c4cd4211...184183c240)

Updates `garnet-org/action` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/garnet-org/action/releases)
- [Commits](9e819143e6...2b7fc9d79b)

Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.5
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](b1d7e1fb5d...a16621b09c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.78.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: garnet-org/action
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-23 19:43:23 +02:00

81 lines
2.6 KiB
YAML

name: Tag
on:
workflow_dispatch:
inputs:
version:
description: Version
required: true
tag:
description: Tag
default: latest
required: true
permissions: {}
jobs:
tag-in-registry:
name: Tagging ${{ github.event.inputs.version }} as ${{ github.event.inputs.tag }}
environment: release
runs-on: ubuntu-latest
steps:
- uses: garnet-org/action@2b7fc9d79b54f551b43358c27424a36064b3e078 # v2
with:
api_token: ${{ secrets.GARNET_API_TOKEN }}
- name: Setup Node
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
- name: Update tag
env:
"npm_config_//registry.npmjs.org/:_authToken": ${{ secrets.NPM_TOKEN }}
VERSION: ${{ github.event.inputs.version }}
TAG: ${{ github.event.inputs.tag }}
run: |
npm dist-tag add "pnpm@${VERSION}" latest-11
npm dist-tag add "pnpm@${VERSION}" "${TAG}"
npm dist-tag add "@pnpm/exe@${VERSION}" latest-11
npm dist-tag add "@pnpm/exe@${VERSION}" "${TAG}"
publish-to-winget:
runs-on: ubuntu-latest
environment: release
needs: tag-in-registry
steps:
- uses: vedantmgoyal9/winget-releaser@7bd472be23763def6e16bd06cc8b1cdfab0e2fd5 # main
with:
identifier: pnpm.pnpm
version: ${{ github.event.inputs.version }}
release-tag: v${{ github.event.inputs.version }}
token: ${{ secrets.WINGET_TOKEN }}
post-to-reddit:
runs-on: ubuntu-latest
environment: release
needs: tag-in-registry
steps:
- uses: bluwy/release-for-reddit-action@b4ee0e0d64da893e0428912aac5cda675082bd85 # v2
with:
username: ${{ secrets.REDDIT_USERNAME }}
password: ${{ secrets.REDDIT_PASSWORD }}
app-id: ${{ secrets.REDDIT_APP_ID }}
app-secret: ${{ secrets.REDDIT_APP_SECRET }}
subreddit: pnpm
title: pnpm@${{ github.event.inputs.version }} is out!
url: https://github.com/pnpm/pnpm/releases/tag/v${{ github.event.inputs.version }}
post-to-mastodon:
runs-on: ubuntu-latest
environment: release
needs: tag-in-registry
steps:
- name: Send toot to Mastodon
id: mastodon
uses: cbrgm/mastodon-github-action@776364a15dd1171530479600c75363f7cbc89ef5 # v2.2.0
with:
message: |
pnpm@${{ github.event.inputs.version }} is out!
https://github.com/pnpm/pnpm/releases/tag/v${{ github.event.inputs.version }}
visibility: "public"
env:
MASTODON_URL: "https://fosstodon.org/"
MASTODON_ACCESS_TOKEN: ${{ secrets.MASTODON_ACCESS_TOKEN }} # access token