@diplodoc/client 5.8.0 → 5.8.1

package/.github/workflows/auto-approve.yml

@@ -19,8 +19,9 @@
 #     commit on the PR was authored AND committed by yc-ui-bot (mirrors
 #     commitsAllAuthoredBy() in scripts/match-auto-approve.js).
 #   - On every push (synchronize) any prior bot approval made for an older commit
-#     is DISMISSED, so an approval never lingers over unreviewed new code. A fresh
-#     approval is only re-issued when the new head is still all-bot content.
+#     is DISMISSED and the workflow stops — no immediate re-approve. A fresh
+#     approval is issued only after other PR workflows finish and all non-excluded
+#     checks on the new head are green (workflow_run trigger).
 #
 # To opt a repo out, exclude this file via .infrarc.yml or distribution.yml.
 
@@ -29,9 +30,15 @@ name: Auto-approve bot PRs
 on:
   pull_request:
     types: [opened, reopened, synchronize, ready_for_review]
+  # After a force-push we only dismiss stale approvals on `synchronize` (below).
+  # Re-approve once the other PR workflows finish and all non-excluded checks are
+  # green — so an approval never covers unreviewed new code while CI is pending.
+  workflow_run:
+    types: [completed]
 
 permissions:
   contents: read
+  checks: read
 
 jobs:
   auto-approve:
@@ -41,9 +48,14 @@ jobs:
     # (For fork PRs GitHub does not expose secrets, so HAS_PAT is false and the
     # step below is skipped — fork PRs can never be auto-approved.)
     if: >
-      github.event.pull_request.user.login == 'yc-ui-bot' &&
-      (startsWith(github.event.pull_request.head.ref, 'ci/update-deps/') ||
-       startsWith(github.event.pull_request.head.ref, 'release-please--'))
+      (github.event_name == 'pull_request' &&
+       github.event.pull_request.user.login == 'yc-ui-bot' &&
+       (startsWith(github.event.pull_request.head.ref, 'ci/update-deps/') ||
+        startsWith(github.event.pull_request.head.ref, 'release-please--'))) ||
+      (github.event_name == 'workflow_run' &&
+       github.event.workflow_run.name != 'Auto-approve bot PRs' &&
+       (startsWith(github.event.workflow_run.head_branch, 'ci/update-deps/') ||
+        startsWith(github.event.workflow_run.head_branch, 'release-please--')))
     env:
       # `secrets` is not available in a step-level `if`; map to a job-level env
       # flag (which can read secrets) so we can skip cleanly when the PAT is unset.
@@ -59,12 +71,69 @@ jobs:
           script: |
             // The only identity whose automated commits we trust to auto-approve.
             const ALLOWED_AUTHOR = 'yc-ui-bot';
+            // Keep in sync with ci_gate.exclude_checks in distribution.yml.
+            const SKIP_CHECK_RE = /^(auto-approve|release-please|dependabot|update dependenc|distribute|publish|sonarcloud)/i;
 
             const {owner, repo} = context.repo;
-            const pr = context.payload.pull_request;
-            const prNumber = pr.number;
-            const headSha = pr.head.sha;
-            const prAuthor = pr.user.login;
+            let pr;
+            let prNumber;
+            let headSha;
+            let prAuthor;
+            let isSynchronize = false;
+
+            if (context.eventName === 'workflow_run') {
+              const wr = context.payload.workflow_run;
+              if (wr.conclusion !== 'success' && wr.conclusion !== 'skipped') {
+                core.notice(`Workflow "${wr.name}" concluded ${wr.conclusion} — skip re-approve.`);
+                return;
+              }
+              const branch = wr.head_branch;
+              const {data: prs} = await github.rest.pulls.list({
+                owner, repo, state: 'open', head: `${owner}:${branch}`, per_page: 2,
+              });
+              if (prs.length !== 1) {
+                core.notice(`Expected 1 open PR for ${branch}, found ${prs.length} — skip.`);
+                return;
+              }
+              pr = prs[0];
+              if (!pr.user || pr.user.login !== ALLOWED_AUTHOR) {
+                core.notice('Open PR author is not the trusted bot — skip.');
+                return;
+              }
+              prNumber = pr.number;
+              headSha = pr.head.sha;
+              prAuthor = pr.user.login;
+              if (wr.head_sha !== headSha) {
+                core.notice(`Workflow run SHA ${wr.head_sha} != PR head ${headSha} — skip.`);
+                return;
+              }
+
+              const checkRuns = await github.paginate(github.rest.checks.listForRef, {
+                owner, repo, ref: headSha, per_page: 100,
+              });
+              const relevant = checkRuns.filter((r) => r.name && !SKIP_CHECK_RE.test(r.name));
+              if (relevant.length === 0) {
+                core.notice('No relevant check runs yet — skip re-approve.');
+                return;
+              }
+              if (relevant.some((r) => r.status !== 'completed')) {
+                core.notice('CI still in progress — skip re-approve.');
+                return;
+              }
+              const bad = relevant.filter(
+                (r) => !['success', 'skipped', 'neutral'].includes(r.conclusion || ''),
+              );
+              if (bad.length) {
+                core.notice(`Failing checks: ${bad.map((r) => r.name).join(', ')} — skip.`);
+                return;
+              }
+            } else {
+              pr = context.payload.pull_request;
+              prNumber = pr.number;
+              headSha = pr.head.sha;
+              prAuthor = pr.user.login;
+              isSynchronize = context.payload.action === 'synchronize';
+            }
 
             // Resolve the approver (this PAT's identity).
             let approver = '';
@@ -135,6 +204,13 @@ jobs:
               return;
             }
 
+            // On push: invalidate stale bot approvals and stop. Re-approve only
+            // after CI completes (workflow_run trigger above).
+            if (isSynchronize) {
+              core.notice(`PR #${prNumber}: stale approvals dismissed; waiting for CI before re-approve.`);
+              return;
+            }
+
             // Idempotent: skip if we already approved the current head.
             if (botApprovals.some((r) => r.commit_id === headSha)) {
               core.notice(`PR #${prNumber} already approved for current head — nothing to do.`);

package/.github/workflows/package-lock.yml

@@ -55,7 +55,16 @@ jobs:
           git config --global user.email "95919151+yc-ui-bot@users.noreply.github.com"
           git config --global user.name "yc-ui-bot"
 
-          # Commit and push
           git add package-lock.json
-          git commit -m "chore: Update package-lock.json" --no-verify
-          git push origin HEAD:${BRANCH_NAME}
+          git fetch origin "${BRANCH_NAME}"
+          REMOTE_TIP="$(git rev-parse "origin/${BRANCH_NAME}")"
+
+          git commit --amend --no-edit --no-verify
+          if git push --force-with-lease origin "HEAD:${BRANCH_NAME}"; then
+            echo "::notice::Pushed amended lockfile commit on ${BRANCH_NAME}"
+          else
+            echo "::warning::Force-push failed, falling back to a regular commit"
+            git reset --soft "${REMOTE_TIP}"
+            git commit -m "chore: Update package-lock.json" --no-verify
+            git push origin "HEAD:${BRANCH_NAME}"
+          fi

package/.github/workflows/release.yml

@@ -10,6 +10,22 @@ name: Release Package to npm
 # - Prerelease: triggered by manual dispatch with 'prerelease' type (only from non-protected branches)
 # - Deprecate: triggered by manual dispatch with 'deprecate' type (marks a version as deprecated)
 
+# GitHub auto-generates a run-name from event data when run-name is not set
+# explicitly (e.g. it uses the release tag_name for `release` events, which is
+# why runs triggered by the `release` event show "vX.XX.XX" instead of the
+# workflow name). workflow_dispatch events carry no such default, so without an
+# explicit run-name every manual run (prerelease/deprecate) just shows the
+# workflow name. The run-name below makes all trigger types display something
+# meaningful in the Actions history.
+run-name: >-
+  ${{
+    github.event_name == 'release' && format('Release: {0}', github.event.release.tag_name)
+    || (github.event_name == 'workflow_dispatch' && inputs.release_type == 'deprecate' && inputs.deprecate_new_latest != '' && format('Deprecate: {0} -> {1}', inputs.deprecate_version, inputs.deprecate_new_latest))
+    || (github.event_name == 'workflow_dispatch' && inputs.release_type == 'deprecate' && format('Deprecate: {0}', inputs.deprecate_version))
+    || (github.event_name == 'workflow_dispatch' && inputs.release_type == 'prerelease' && format('Prerelease: {0}', github.ref_name))
+    || github.workflow
+  }}
+
 on:
   release:
     types: [published]

package/.github/workflows/update-deps.yml

@@ -44,7 +44,7 @@ on:
         description: 'Update as devDependency (only for single package selection)'
         required: false
         type: boolean
-        default: '@diplodoc/transform'
+        default: false
       packages:
         description: 'Package names to update (comma-separated, e.g., "@diplodoc/transform,dev:@diplodoc/client"). Use "dev:" prefix for devDependencies. If empty, uses single package selection above.'
         required: false

package/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "5.8.0"
+  ".": "5.8.1"
 }

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [5.8.1](https://github.com/diplodoc-platform/client/compare/v5.8.0...v5.8.1) (2026-07-14)
+
+
+### Bug Fixes
+
+* add cursor pointer to gallery images ([3c0707d](https://github.com/diplodoc-platform/client/commit/3c0707de18ff2e35f61c161e74cf15574b818e5a))
+* **deps:** Update dev:@diplodoc/mermaid-extension@2.2.0 ([#382](https://github.com/diplodoc-platform/client/issues/382)) ([8ec91b4](https://github.com/diplodoc-platform/client/commit/8ec91b49cee59dc2f4ccb069f5c3e3db308ea0cf))
+
 ## [5.8.0](https://github.com/diplodoc-platform/client/compare/v5.7.14...v5.8.0) (2026-07-06)