climaybe 1.7.1 → 1.7.3

package/README.md

@@ -288,7 +288,7 @@ Add the following secrets to your GitHub repository (or use **GitLab CI/CD varia
 
 - **Branch:** Single default branch `main`. Feature branches open as PRs into `main`.
 - **Versioning:** [SemVer](https://semver.org/). Versions are **bumped automatically** when PRs are merged to `main` using [conventional commits](https://www.conventionalcommits.org/): `fix:` → patch, `feat:` → minor, `BREAKING CHANGE` or `feat!:` → major.
-- **Flow:** Merge to `main` → [Release version](.github/workflows/release-version.yml) runs semantic-release (bumps `package.json`, pushes tag) → tag push triggers [Release](.github/workflows/release.yml) (tests + publish to npm). Requires `NPM_TOKEN` secret for npm publish. Do not create tags manually; only the Release version workflow creates tags so that tag and package version stay in sync.
+- **Flow:** Merge to `main` → [Release version](.github/workflows/release-version.yml) runs semantic-release (bumps `package.json`, publishes to npm, pushes tag). Optional: tag push runs [Verify release tag](.github/workflows/verify-release-tag.yml) for an extra test pass and tag vs `package.json` check (no publish). Prefer [npm Trusted Publisher](https://docs.npmjs.com/trusted-publishers) (workflow file `release-version.yml`) so no long-lived `NPM_TOKEN` is needed for CI; see [CONTRIBUTING.md](CONTRIBUTING.md). Do not create tags manually; only the Release version workflow creates tags so that tag and package version stay in sync.
 - **CI:** Every PR and push to `main` runs tests on Node 20 and 22 ([CI workflow](.github/workflows/ci.yml)).
 
 See [CONTRIBUTING.md](CONTRIBUTING.md) for branch, PR, and conventional-commit details.

package/bin/version.txt

@@ -1 +1 @@
-1.7.1
+1.7.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "climaybe",
-  "version": "1.7.1",
+  "version": "1.7.3",
   "description": "Shopify CI/CD CLI — scaffolds workflows, branch strategy, and store config for single-store and multi-store theme repos",
   "type": "module",
   "bin": {
@@ -29,6 +29,10 @@
   },
   "bugs": "https://github.com/electricmaybe/climaybe/issues",
   "homepage": "https://github.com/electricmaybe/climaybe#readme",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "scripts": {
     "test": "node scripts/run-tests.js 2>&1 | tee test.log",
     "prepare": "husky",
@@ -56,12 +60,7 @@
         }
       ],
       "@semantic-release/release-notes-generator",
-      [
-        "@semantic-release/npm",
-        {
-          "npmPublish": false
-        }
-      ],
+      "@semantic-release/npm",
       [
         "@semantic-release/git",
         {

package/src/workflows/shared/ai-changelog.yml

@@ -30,7 +30,7 @@ jobs:
       contents: read
       models: read
     outputs:
-      changelog: ${{ steps.ai.outputs.changelog }}
+      changelog: ${{ steps.ai.outputs.changelog || steps.no_commits.outputs.changelog }}
 
     steps:
       - uses: actions/checkout@v4
@@ -43,25 +43,21 @@ jobs:
           COMMITS=$(git log --pretty=format:"%h %s" ${{ inputs.base_ref }}..${{ inputs.head_ref }} 2>/dev/null || echo "")
           if [ -z "$COMMITS" ]; then
             echo "No commits found between ${{ inputs.base_ref }} and ${{ inputs.head_ref }}"
-            echo "commits=" >> $GITHUB_OUTPUT
+            echo "has_commits=false" >> $GITHUB_OUTPUT
             exit 0
           fi
-          # Keep commits as multiline plain text
-          {
-            echo "commits<<COMMITS_EOF"
-            echo "$COMMITS"
-            echo "COMMITS_EOF"
-          } >> $GITHUB_OUTPUT
+          # File avoids huge env vars and shell escaping; jq reads via --rawfile (never use --argjson for raw log text).
+          printf '%s\n' "$COMMITS" > commits-for-ai.txt
+          echo "has_commits=true" >> $GITHUB_OUTPUT
 
       - name: Generate changelog (Gemini -> GitHub Models fallback)
         id: ai
-        if: steps.commits.outputs.commits != ''
+        if: steps.commits.outputs.has_commits == 'true'
         env:
           GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          COMMITS_RAW: ${{ steps.commits.outputs.commits }}
         run: |
-          COMMITS="$COMMITS_RAW"
+          COMMITS=$(cat commits-for-ai.txt)
           PROVIDER="fallback"
 
           PROMPT=$(cat <<'PROMPT_EOF'
@@ -86,7 +82,7 @@ jobs:
           if [ -n "$GEMINI_API_KEY" ]; then
             PAYLOAD=$(jq -n \
               --arg prompt "$PROMPT" \
-              --arg commits "$COMMITS" \
+              --rawfile commits commits-for-ai.txt \
               '{
                 "contents": [{
                   "parts": [{"text": ($prompt + "\n" + $commits)}]
@@ -112,7 +108,7 @@ jobs:
           if [ -z "$CHANGELOG" ] || [ "$CHANGELOG" = "null" ]; then
             GH_PAYLOAD=$(jq -n \
               --arg prompt "$PROMPT" \
-              --arg commits "$COMMITS" \
+              --rawfile commits commits-for-ai.txt \
               '{
                 "model": "gpt-4o-mini",
                 "messages": [
@@ -157,7 +153,8 @@ jobs:
           } >> $GITHUB_OUTPUT
 
       - name: Fallback if no commits
-        if: steps.commits.outputs.commits == ''
+        id: no_commits
+        if: steps.commits.outputs.has_commits != 'true'
         run: |
           {
             echo "changelog<<CHANGELOG_EOF"