Skip to content

fix: iteration on the publish-npm workflow#8087

Merged
alexhancock merged 1 commit intomainfrom
alexhancock/publish-npm-fix-and-dry-run
Mar 24, 2026
Merged

fix: iteration on the publish-npm workflow#8087
alexhancock merged 1 commit intomainfrom
alexhancock/publish-npm-fix-and-dry-run

Conversation

@alexhancock
Copy link
Copy Markdown
Collaborator

Fixes an issue with artifact copying, and adds a dry-run mode we can use to verify this workflow before merge

@alexhancock alexhancock requested a review from jamadeo March 24, 2026 14:38
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 67feac6b4b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

@alexhancock alexhancock force-pushed the alexhancock/publish-npm-fix-and-dry-run branch from 67feac6 to 1582346 Compare March 24, 2026 16:28
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 15823461df

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment on lines +40 to +42
environment:
name: npm-production-publishing
url: https://www.npmjs.com/org/block
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Scope protected environment to publish-only execution

With the environment configured as documented (Deployment branches: main), putting environment: npm-production-publishing on the entire release job causes GitHub to block workflow_dispatch runs from non-main branches before any steps execute. That means the new dry-run path cannot actually run on feature branches (the job is denied before Dry run summary), so this change prevents the pre-merge validation flow it introduces.

Useful? React with 👍 / 👎.

@alexhancock alexhancock force-pushed the alexhancock/publish-npm-fix-and-dry-run branch from 1582346 to 161861e Compare March 24, 2026 16:55
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 161861e5fd

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment on lines +120 to +122
environment:
name: npm-production-publishing
url: https://www.npmjs.com/org/block
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Place deployment environment at job scope

Define environment on the release job instead of this step, because GitHub Actions does not apply deployment environments at step scope. With it here, the workflow either fails validation (Unexpected value 'environment') or runs without attaching npm-production-publishing, so the protected NPM_PUBLISH_TOKEN environment secret is not provided to changesets/action and main-branch publishes cannot proceed as intended.

Useful? React with 👍 / 👎.

@alexhancock alexhancock added this pull request to the merge queue Mar 24, 2026
Merged via the queue into main with commit 21bc462 Mar 24, 2026
27 checks passed
@alexhancock alexhancock deleted the alexhancock/publish-npm-fix-and-dry-run branch March 24, 2026 17:58
wpfleger96 added a commit that referenced this pull request Mar 24, 2026
* origin/main:
  fix: use pnpm when publishing (#8092)
  Alexhancock/publish npm file format fix (#8091)
  fix: iteration on the publish-npm workflow (#8087)
  chore: ignore unmaintained warning for proc-macro-error (#8084)
  chore: clean up stray recipe.yaml (#8086)
  chore(release): bump version to 1.29.0 (minor) (#8088)
  Update lockfile references (#8085)
  Fix version bump (#8083)
  Add a code review step which uses a short-lived provider token (#7932)
lifeizhou-ap added a commit that referenced this pull request Mar 25, 2026
* main:
  Fix user message text silently dropped when message contains both text and image (#8071)
  fix: use pnpm when publishing (#8092)
  Alexhancock/publish npm file format fix (#8091)
  fix: iteration on the publish-npm workflow (#8087)
  chore: ignore unmaintained warning for proc-macro-error (#8084)
  chore: clean up stray recipe.yaml (#8086)
  chore(release): bump version to 1.29.0 (minor) (#8088)
  Update lockfile references (#8085)
  Fix version bump (#8083)
  Add a code review step which uses a short-lived provider token (#7932)
michaelneale added a commit that referenced this pull request Mar 25, 2026
* origin/main:
  Fix user message text silently dropped when message contains both text and image (#8071)
  fix: use pnpm when publishing (#8092)
  Alexhancock/publish npm file format fix (#8091)
  fix: iteration on the publish-npm workflow (#8087)
  chore: ignore unmaintained warning for proc-macro-error (#8084)
  chore: clean up stray recipe.yaml (#8086)
  chore(release): bump version to 1.29.0 (minor) (#8088)
  Update lockfile references (#8085)
  Fix version bump (#8083)
  Add a code review step which uses a short-lived provider token (#7932)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants