ci: configure Trusted Publishing for prereleases #2711
Conversation
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned Files
|
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull request overview
This PR consolidates prerelease publishing functionality into the main npm publishing workflow by removing the standalone .github/workflows/npm-publish-prerelease.yml file and incorporating its logic into .github/workflows/npm-publish.yml. This simplifies workflow management while maintaining separation between regular releases and prereleases through distinct jobs.
Changes:
- Added
workflow_dispatchtrigger withnpm_taginput to enable manual prerelease publishing - Added new
publish-prereleasejob that runs only on manual triggers (workflow_dispatch) - Updated the
publishjob condition to ensure it only runs on merged pull requests, not manual triggers - Removed the standalone prerelease workflow file
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
.github/workflows/npm-publish.yml |
Added workflow_dispatch trigger, new publish-prerelease job for manual prereleases, and updated publish job condition to prevent conflicts |
.github/workflows/npm-publish-prerelease.yml |
Removed standalone prerelease workflow as its functionality is now integrated into the main workflow |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
sjinks
force-pushed
the
trusted-publishing-for-prereleases
branch
from
e6db1cb to
3fa7bcc
Compare
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <[email protected]>
|
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
2 participants
This pull request consolidates the npm prerelease publishing workflow into the main
npm-publish.ymlfile, removing the separate prerelease workflow and improving how prerelease publishing is triggered and managed. The main improvements include combining workflows, adding support for manual triggers, and refining job conditions for clarity and correctness.Workflow consolidation and improvements:
.github/workflows/npm-publish-prerelease.ymlfile, moving all prerelease publishing logic into the main workflow.workflow_dispatchtrigger with annpm_taginput to.github/workflows/npm-publish.yml, allowing manual prerelease publishing with custom tags.publish-prereleasejob in.github/workflows/npm-publish.ymlthat runs only when triggered manually, using the same steps as the removed workflow.publishjob to ensure it only runs on merged pull requests, not on manual triggers.