Release #170
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: 'The version of the react-native we the template to use in this release. For example 0.75.0-rc.0' | |
| required: true | |
| type: string | |
| is_latest_on_npm: | |
| description: 'Whether we want to tag this template release as `latest` on NPM' | |
| required: true | |
| type: boolean | |
| default: false | |
| dry_run: | |
| description: 'Run without making persistent changes to git or npm' | |
| type: boolean | |
| default: true | |
| jobs: | |
| publish_template: | |
| runs-on: ubuntu-latest | |
| environment: npm-publish | |
| permissions: | |
| # Required for npm trusted publishing (OIDC token exchange with the registry) | |
| id-token: write | |
| # Required so the bump commit & tag can be pushed back to the branch | |
| contents: write | |
| steps: | |
| - name: Safeguard against branch name | |
| run: | | |
| if [[ "$GITHUB_REF_NAME" != *-stable ]]; then | |
| echo "Error: This workflow can only be executed from a branch ending with '-stable'." | |
| exit 1 | |
| fi | |
| - name: Checkout | |
| uses: actions/checkout@v4.1.1 | |
| - name: Setup node.js | |
| # setup-node@v6 supports npm trusted publishing (OIDC): with `registry-url` | |
| # set and no token provided, it configures the registry without writing a | |
| # bogus NODE_AUTH_TOKEN placeholder, so `npm publish` performs the OIDC | |
| # token exchange. Older versions (e.g. v4) wrote a placeholder token that | |
| # made npm attempt token auth instead, failing with E404/ENEEDAUTH. | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: 'lts/*' | |
| registry-url: 'https://registry.npmjs.org' | |
| # Never cache dependencies in a publishing workflow: a poisoned cache | |
| # could expose the short-lived OIDC token. | |
| package-manager-cache: false | |
| - name: Determine new template version | |
| run: echo "VERSION=$(./scripts/bumpedTemplateVersion.sh ${{ inputs.version }})" >> $GITHUB_ENV | |
| - name: Update versions to input one | |
| run: node ./scripts/updateTemplateVersion.js $VERSION | |
| - name: Update template/package.json to nightly react-native + @react-native | |
| run: node ./scripts/updateReactNativeVersion.js "${{ inputs.version }}" | |
| - name: Create corresponding commit & git tag | |
| run: | | |
| GIT=(echo git) | |
| if [ "${{ inputs.dry_run }}" = "false" ]; then | |
| GIT=(git) | |
| fi | |
| "${GIT[@]}" config --global user.name 'React Native Bot' | |
| "${GIT[@]}" config --global user.email 'bot@reactnative.dev' | |
| if [ -z "$("${GIT[@]}" status --porcelain)" ]; then | |
| echo "No changes, a previous release might have failed at the publish step. Continue to retry." | |
| exit 0 | |
| fi | |
| "${GIT[@]}" commit -am "Bumping template to $VERSION" | |
| "${GIT[@]}" push | |
| "${GIT[@]}" tag $VERSION | |
| "${GIT[@]}" push --tags | |
| - name: Publish on NPM (with tag if needed) | |
| run: | | |
| args=(--dry-run) | |
| if [ "${{ inputs.dry_run }}" = "false" ]; then | |
| args=() | |
| fi | |
| IS_LATEST_ON_NPM="${{ inputs.is_latest_on_npm }}" | |
| if [[ "$IS_LATEST_ON_NPM" == "true" ]]; then | |
| npm publish --tag latest "${args[@]}" | |
| elif [[ "$VERSION" == *"rc"* ]]; then | |
| npm publish --tag next "${args[@]}" | |
| elif [[ "$GITHUB_REF_NAME" == *"-stable" ]]; then | |
| npm publish --tag "$GITHUB_REF_NAME" "${args[@]}" | |
| else | |
| npm publish "${args[@]}" | |
| fi |