@rtorcato/repo-tooling 4.5.0 → 4.6.0

package/dist/base/checks.js

@@ -142,11 +142,34 @@ export async function checkBrand(dir) {
     if (problems.length > 0) {
         return { check, status: 'drift', detail: problems.join('; '), hint: BRAND_HINT };
     }
+    // Name the pieces still missing (#679). Severity is unchanged: brand is optional.
+    const missing = [];
+    if (!(await has('brand/favicon.svg')))
+        missing.push('favicon (brand/favicon.svg)');
+    const unrendered = [];
+    for (const n of ['banner', 'banner-mobile', 'social-card', 'favicon-512']) {
+        if (!(await has(`brand/${n}.png`)))
+            unrendered.push(`${n}.png`);
+    }
+    if (unrendered.length > 0)
+        missing.push(`rendered PNGs (brand/${unrendered.join(', ')})`);
+    const readmeFile = path.join(dir, 'README.md');
+    const readmeText = (await fs.pathExists(readmeFile)) ? await fs.readFile(readmeFile, 'utf-8') : '';
+    if (!/brand\/banner(?:-mobile)?\.png/.test(readmeText))
+        missing.push('README banner');
     if (!brandDir) {
         return {
             check,
             status: 'optional-missing',
-            detail: 'no brand/ folder — the repo ships no regenerable brand sources',
+            detail: `no brand/ folder — missing: ${missing.join('; ')}`,
+            hint: BRAND_HINT,
+        };
+    }
+    if (missing.length > 0) {
+        return {
+            check,
+            status: 'ok',
+            detail: `brand/ holds the SVG sources and render.sh; missing: ${missing.join('; ')}`,
             hint: BRAND_HINT,
         };
     }

package/dist/base/ci.js

@@ -13,7 +13,9 @@
 /** Every job is gated on the skip-CI check; extra conditions are ANDed on. */
 const SKIP_GUARD = "needs.check-skip.outputs.should-skip != 'true'";
 /** Header through `jobs:` — triggers and concurrency are language-independent. */
-const WORKFLOW_HEADER = `name: 🚀 CI/CD Pipeline
+/** The generated CI workflow's `name:` — the docs workflow's `workflow_run` must match it. */
+export const CI_WORKFLOW_NAME = '🚀 CI/CD Pipeline';
+const WORKFLOW_HEADER = `name: ${CI_WORKFLOW_NAME}
 
 on:
   push:
@@ -24,7 +26,9 @@ on:
 
 concurrency:
   group: \${{ github.workflow }}-\${{ github.ref }}
-  cancel-in-progress: true
+  # Never cancel on main: a newer push would kill a release that is waiting on
+  # approval or halfway through publishing.
+  cancel-in-progress: \${{ github.event_name == 'pull_request' }}
 
 jobs:
 `;

package/dist/cli/generators/docs-site.js

@@ -1,6 +1,7 @@
 import path from 'node:path';
 import fs from 'fs-extra';
 import selfPackageJson from '../../../package.json' with { type: 'json' };
+import { CI_WORKFLOW_NAME } from '../../base/ci.js';
 import { coverageUploadWorkflow } from '../../base/checks.js';
 import { jsBadgeAudience } from '../../languages/js/checks.js';
 import { copyPreset, PRESETS } from '../utils/copy-preset.js';
@@ -344,15 +345,18 @@ on:
     paths:
       - 'apps/docs/**'
       - '.github/workflows/docs.yml'
-  # The changelog page is built from GitHub Releases, and no release commit
-  # lands on main any more (see #417) — so a push trigger alone would never
-  # rebuild the site after a release.
-  release:
-    types: [published]
+  # The changelog page is built from GitHub Releases. A release created with
+  # GITHUB_TOKEN never fires \`release: published\`, so rebuild once CI (which
+  # runs semantic-release) succeeds on main instead — no PAT needed (#691).
+  workflow_run:
+    workflows: ['${CI_WORKFLOW_NAME}']
+    types: [completed]
+    branches: [main]
   workflow_dispatch:
 
 jobs:
   docs:
+    if: github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success'
     permissions:
       contents: read
       pages: write

package/dist/languages/js/ci.js

@@ -1,3 +1,12 @@
+/**
+ * Conventional-commit types that cut a release, mirroring the `releaseRules` in
+ * tooling/semantic-release (a test keeps the two in step). `feat!:` and `fix!:`
+ * start with these too, so breaking changes are covered.
+ */
+export const RELEASE_TYPES = ['feat', 'fix', 'perf', 'refactor', 'revert', 'update'];
+// Match only the START of the squash subject: the message carries the whole PR
+// body, so searching it matched PRs that merely mentioned `BREAKING CHANGE`.
+const RELEASE_IF = `github.ref == 'refs/heads/main' && (github.event_name == 'workflow_dispatch' || github.event_name == 'push' && (${RELEASE_TYPES.map((t) => `startsWith(github.event.head_commit.message, '${t}')`).join(' || ')}))`;
 /** Coverage is uploaded when Vitest is the test runner (it emits an lcov report). */
 export function usesCoverage(config) {
     return config.testing.framework === 'vitest';
@@ -175,7 +184,7 @@ ${attw}${publint}
             id: 'release',
             // Gate the publish on everything that ran before it.
             needs: jobs.map((job) => job.id),
-            if: "github.ref == 'refs/heads/main'",
+            if: RELEASE_IF,
             extra: `    permissions:
       contents: write
       issues: write
@@ -224,7 +233,14 @@ ${attw}${publint}
         # for the package on npmjs.com (Settings → Trusted Publisher).
         env:
           GITHUB_TOKEN: \${{ secrets.RELEASE_TOKEN || secrets.GITHUB_TOKEN }}
-        run: npx semantic-release`,
+        run: |
+          set -o pipefail
+          npx semantic-release 2>&1 | tee release.log
+          # semantic-release exits 0 when main moved on since this run started,
+          # publishing nothing (#690). Say so instead of going quietly green.
+          if grep -q "is behind the remote one" release.log; then
+            echo "::warning::main moved on; nothing was published. Re-run via workflow_dispatch."
+          fi`,
         });
     }
     return jobs;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rtorcato/repo-tooling",
-	"version": "4.5.0",
+	"version": "4.6.0",
 	"description": "One CLI to scaffold, audit and fix your repo's whole toolchain — linting, tests, commits, releases & CI.",
 	"type": "module",
 	"keywords": [