Add semver management action#512
Open
rechner wants to merge 16 commits into
Open
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
- Add template-injection ignore comments to glitchtip-cli release steps - Add template-injection ignore comment to docker image build step - Move DEPLOY_ENV to explicit environment variable in deploy step - Use variable substitution in deploy command for consistency - Suppress zizmor warnings for safe template usage from git describe
rechner
marked this pull request as ready for review
May 13, 2026 18:54
- Pin actions/checkout to v6.0.2 with full commit hash for reproducibility - Add persist-credentials: false to checkout steps for security - Convert noop-labels from array to pipe-delimited string format in pr-validate-release and tag-and-release workflows - Remove unnecessary advanced-security configuration from zizmor workflow - Improve workflow security and consistency across CI/CD pipeline
|
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool. What Enabling Code Scanning Means:
For more information about GitHub Code Scanning, check out the documentation. |
rechner
added
major release
minor release
patch release
and removed
minor release
patch release
labels
|
meanderfox
approved these changes
Jun 23, 2026
|
Member
Author
|
Will need to rework after #569 is merged to be compatible with the new deploy setup |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Semver release management and version injection
Summary
Adds automated semantic versioning via PR labels, injects version/SHA metadata into Docker builds, and integrates GlitchTip release tracking into the deploy workflow.
Changes
Semver automation
pr-validate-release.ymlaction validates that PRs carry a release label (major release,minor release,patch release, ornoop/documentation change) and include release notestag-and-release.ymlaction bumps and tags the version on merge toproductionusingpr-semver-bumpVersion injection
APIS_VERSIONandAPIS_GIT_SHAbuild args (replaces the oldSENTRY_RELEASEarg)git describe --tagsand short SHA, passes both into the Docker build, and tags images withgit-<sha>in addition to the version tagAPIS_VERSIONandAPIS_GIT_SHAfrom environmentGlitchTip integration