@platzio/sdk 0.6.0-beta.3 → 0.7.0-beta.2

package/.github/workflows/release.yaml

@@ -5,18 +5,23 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   release:
     name: 🚀 Publish SDK
     runs-on: ubuntu-latest
     steps:
       - name: 🛎️ Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: 🛠️ Setup node
         uses: actions/setup-node@v4
         with:
           node-version: latest
+          registry-url: "https://registry.npmjs.org"
 
       - name: 🎲 Choose backend version
         id: backend_tag
@@ -28,8 +33,17 @@ jobs:
             echo "backend_tag=v`cat package.json | jq -r .version`" >> "$GITHUB_OUTPUT"
           fi
 
+      - name: 🏷️ Choose npm dist-tag
+        id: npm_tag
+        run: |
+          version=`cat package.json | jq -r .version`
+          case "$version" in
+            *-*) echo "tag=beta" >> "$GITHUB_OUTPUT" ;;
+            *)   echo "tag=latest" >> "$GITHUB_OUTPUT" ;;
+          esac
+
       - name: ⬇️ Download OpenAPI schema
-        uses: robinraju/release-downloader@v1.8
+        uses: robinraju/release-downloader@v1.12
         with:
           repository: ${{ github.repository_owner }}/backend
           tag: ${{ steps.backend_tag.outputs.backend_tag }}
@@ -48,6 +62,4 @@ jobs:
           npm run build
 
       - name: 🚀 Publish to NPM
-        uses: JS-DevTools/npm-publish@v3
-        with:
-          token: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --provenance --access public --tag "${{ steps.npm_tag.outputs.tag }}"

package/AGENTS.md

@@ -0,0 +1,9 @@
+# AGENTS.md
+
+## Versioning
+
+This SDK is released in lockstep with the Platzio backend and carries the
+**exact same version as the backend release**, pre-release marker included
+(see `platzio/dev` AGENTS.md, "Versioning across repos"). So when the
+backend releases `0.7.0-beta.1`, this package is `0.7.0-beta.1` too — they
+are always cut together. Update both `package.json` and the lockfile entry.