@capillarytech/cap-ui-utils 3.1.3 → 3.1.4-beta.fix-lockfile-sync.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/workflows/publish.yml +52 -0
- package/package.json +16 -6
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
# =============================================================================
|
|
2
|
+
# cap-ui-common-utils publisher — @capillarytech/cap-ui-utils (root publish)
|
|
3
|
+
#
|
|
4
|
+
# THIN CALLER. Owns only the workflow_dispatch dropdown + the concurrency queue;
|
|
5
|
+
# all real logic lives in the reusable workflow hosted in cap-ui-library.
|
|
6
|
+
#
|
|
7
|
+
# Register THIS file's name (publish.yml) as the package's npm Trusted Publisher
|
|
8
|
+
# on npmjs.com (Organization = `Capillary`, Repository = `cap-ui-common-utils`).
|
|
9
|
+
# NB: the repo is `cap-ui-common-utils`; the package is `@capillarytech/cap-ui-utils`.
|
|
10
|
+
#
|
|
11
|
+
# PRECONDITIONS (already satisfied for cap-ui-library):
|
|
12
|
+
# - the reusable workflow is on Capillary/cap-ui-library `master`;
|
|
13
|
+
# - cap-ui-library → Settings → Actions → Access = accessible to the org.
|
|
14
|
+
# =============================================================================
|
|
15
|
+
|
|
16
|
+
name: Publish package
|
|
17
|
+
|
|
18
|
+
on:
|
|
19
|
+
workflow_dispatch:
|
|
20
|
+
inputs:
|
|
21
|
+
releaseType:
|
|
22
|
+
description: "master => patch/minor/major, other branch => alpha/beta"
|
|
23
|
+
type: choice
|
|
24
|
+
required: true
|
|
25
|
+
options: [patch, minor, major, alpha, beta]
|
|
26
|
+
|
|
27
|
+
concurrency:
|
|
28
|
+
group: publish-${{ github.repository }}
|
|
29
|
+
cancel-in-progress: false # queue, never race the stable bump
|
|
30
|
+
|
|
31
|
+
jobs:
|
|
32
|
+
publish:
|
|
33
|
+
permissions:
|
|
34
|
+
contents: write # push bump commit + tag (stable only) — passed through
|
|
35
|
+
id-token: write # OIDC publish — passed through
|
|
36
|
+
uses: Capillary/cap-ui-library/.github/workflows/publish-package.yml@master
|
|
37
|
+
with:
|
|
38
|
+
releaseType: ${{ inputs.releaseType }}
|
|
39
|
+
package-name: "@capillarytech/cap-ui-utils" # logging only
|
|
40
|
+
# Root publish — no publish-directory / library-command overrides needed.
|
|
41
|
+
# This package is PUBLIC (publishConfig.access = public); set npm-access
|
|
42
|
+
# explicitly so a publish can never silently narrow it. No @capillarytech
|
|
43
|
+
# deps, so `npm ci` needs no registry auth.
|
|
44
|
+
npm-access: public
|
|
45
|
+
# Pass ONLY the two secrets the reusable needs (least privilege — not
|
|
46
|
+
# `secrets: inherit`): NPM_PUBLISH_TOKEN (npm token fallback when OIDC isn't
|
|
47
|
+
# set up) + RELEASE_PAT (commit-back to protected master). When either is
|
|
48
|
+
# unset it resolves to empty -> publish uses OIDC, commit-back uses GITHUB_TOKEN.
|
|
49
|
+
# See docs/02 §2.4, docs/04 §4.3.
|
|
50
|
+
secrets:
|
|
51
|
+
NPM_PUBLISH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
|
|
52
|
+
RELEASE_PAT: ${{ secrets.RELEASE_PAT }}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@capillarytech/cap-ui-utils",
|
|
3
|
-
"version": "3.1.
|
|
3
|
+
"version": "3.1.4-beta.fix-lockfile-sync.2",
|
|
4
4
|
"publishConfig": {
|
|
5
5
|
"access": "public"
|
|
6
6
|
},
|
|
@@ -30,10 +30,20 @@
|
|
|
30
30
|
"nanoid": ">=3"
|
|
31
31
|
},
|
|
32
32
|
"peerDependenciesMeta": {
|
|
33
|
-
"webdriverio": {
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
"
|
|
37
|
-
|
|
33
|
+
"webdriverio": {
|
|
34
|
+
"optional": true
|
|
35
|
+
},
|
|
36
|
+
"@rpii/wdio-commands": {
|
|
37
|
+
"optional": true
|
|
38
|
+
},
|
|
39
|
+
"axios": {
|
|
40
|
+
"optional": true
|
|
41
|
+
},
|
|
42
|
+
"supertest": {
|
|
43
|
+
"optional": true
|
|
44
|
+
},
|
|
45
|
+
"nanoid": {
|
|
46
|
+
"optional": true
|
|
47
|
+
}
|
|
38
48
|
}
|
|
39
49
|
}
|