Files
pnpm/.github/workflows/update-latest.yml
Zoltan Kochan 9844cdf3a9 ci: integrate garnet-org/action for supply-chain monitoring (#11626)
Adds the Garnet network-monitoring action to the smoke test job, the
release workflow, and the npm tag workflow. The full CI test matrix is
left untouched to keep per-job overhead off the broad cross-platform
runs; the smoke test still exercises a representative install/test flow.
2026-05-14 08:25:30 +02:00

81 lines
2.6 KiB
YAML

name: Tag
on:
workflow_dispatch:
inputs:
version:
description: Version
required: true
tag:
description: Tag
default: latest
required: true
permissions: {}
jobs:
tag-in-registry:
name: Tagging ${{ github.event.inputs.version }} as ${{ github.event.inputs.tag }}
environment: release
runs-on: ubuntu-latest
steps:
- uses: garnet-org/action@9e819143e63d6dda04bca2e90ac85e3cf0e5289d # v2
with:
api_token: ${{ secrets.GARNET_API_TOKEN }}
- name: Setup Node
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
- name: Update tag
env:
"npm_config_//registry.npmjs.org/:_authToken": ${{ secrets.NPM_TOKEN }}
VERSION: ${{ github.event.inputs.version }}
TAG: ${{ github.event.inputs.tag }}
run: |
npm dist-tag add "pnpm@${VERSION}" latest-11
npm dist-tag add "pnpm@${VERSION}" "${TAG}"
npm dist-tag add "@pnpm/exe@${VERSION}" latest-11
npm dist-tag add "@pnpm/exe@${VERSION}" "${TAG}"
publish-to-winget:
runs-on: ubuntu-latest
environment: release
needs: tag-in-registry
steps:
- uses: vedantmgoyal9/winget-releaser@19e706d4c9121098010096f9c495a70a7518b30f # main
with:
identifier: pnpm.pnpm
version: ${{ github.event.inputs.version }}
release-tag: v${{ github.event.inputs.version }}
token: ${{ secrets.WINGET_TOKEN }}
post-to-reddit:
runs-on: ubuntu-latest
environment: release
needs: tag-in-registry
steps:
- uses: bluwy/release-for-reddit-action@b4ee0e0d64da893e0428912aac5cda675082bd85 # v2
with:
username: ${{ secrets.REDDIT_USERNAME }}
password: ${{ secrets.REDDIT_PASSWORD }}
app-id: ${{ secrets.REDDIT_APP_ID }}
app-secret: ${{ secrets.REDDIT_APP_SECRET }}
subreddit: pnpm
title: pnpm@${{ github.event.inputs.version }} is out!
url: https://github.com/pnpm/pnpm/releases/tag/v${{ github.event.inputs.version }}
post-to-mastodon:
runs-on: ubuntu-latest
environment: release
needs: tag-in-registry
steps:
- name: Send toot to Mastodon
id: mastodon
uses: cbrgm/mastodon-github-action@fc8b40e2ec9e8208654b0bd8695e03ecc3364d7d # v2.1.26
with:
message: |
pnpm@${{ github.event.inputs.version }} is out!
https://github.com/pnpm/pnpm/releases/tag/v${{ github.event.inputs.version }}
visibility: "public"
env:
MASTODON_URL: "https://fosstodon.org/"
MASTODON_ACCESS_TOKEN: ${{ secrets.MASTODON_ACCESS_TOKEN }} # access token