feat: add publishing workflow with pana verification

Author: leehack

.github/workflows/publish.yml

@@ -0,0 +1,45 @@
+name: Publish to pub.dev
+
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+
+jobs:
+  publish:
+    permissions:
+      id-token: write # Required for authentication using OIDC
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: dart-lang/setup-dart@v1
+
+      - name: Install dependencies
+        run: dart pub get
+
+      - name: Validate Version
+        run: |
+          # Extract version from pubspec.yaml
+          PUBSPEC_VERSION=$(grep '^version:' pubspec.yaml | head -n 1 | sed 's/version: //')
+          # Extract version from tag (remove 'v' prefix)
+          TAG_VERSION=${GITHUB_REF#refs/tags/v}
+          
+          echo "Pubspec version: $PUBSPEC_VERSION"
+          echo "Tag version: $TAG_VERSION"
+          
+          if [ "$PUBSPEC_VERSION" != "$TAG_VERSION" ]; then
+            echo "Error: pubspec.yaml version ($PUBSPEC_VERSION) does not match tag version ($TAG_VERSION)"
+            exit 1
+          fi
+
+      - name: Install Pana
+        run: dart pub global activate pana
+
+      - name: Verify Pana Score (>= 160)
+        run: |
+          dart pub global run pana . --no-warning --json > pana_report.json
+          dart script/verify_pana_score.dart 160
+
+      - name: Publish
+        run: dart pub publish --force

script/verify_pana_score.dart

@@ -1,38 +1,30 @@
 import 'dart:convert';
 import 'dart:io';
 
-void main() {
-  final file = File('pana_report.json');
-  if (!file.existsSync()) {
+void main(List<String> args) {
+  final reportFile = File('pana_report.json');
+  if (!reportFile.existsSync()) {
     print('Error: pana_report.json not found.');
     exit(1);
   }
 
-  final jsonString = file.readAsStringSync();
-  final Map<String, dynamic> report = jsonDecode(jsonString);
+  final report = jsonDecode(reportFile.readAsStringSync());
+  final scores = report['scores'];
+  final grantedPoints = scores['grantedPoints'] as int;
+  final maxPoints = scores['maxPoints'] as int;
 
-  final scores = report['scores'] as Map<String, dynamic>?;
-  if (scores == null) {
-    print('Error: Could not find scores in pana report.');
-    exit(1);
-  }
-
-  final grantedPoints = scores['grantedPoints'] as int?;
-  final maxPoints = scores['maxPoints'] as int?;
-
-  if (grantedPoints == null) {
-    print('Error: Could not find grantedPoints in pana report.');
-    exit(1);
+  // Default threshold is 140, but can be overridden by argument
+  int threshold = 140;
+  if (args.isNotEmpty) {
+    threshold = int.tryParse(args[0]) ?? 140;
   }
 
-  print('Pana Score: $grantedPoints / ${maxPoints ?? "Unknown"}');
+  print('Pana Score: $grantedPoints / $maxPoints');
 
-  if (grantedPoints < 160) {
-    print(
-      'Failure: Pana score $grantedPoints is below the required threshold of 160.',
-    );
+  if (grantedPoints < threshold) {
+    print('Error: Score is below the threshold of $threshold.');
     exit(1);
   }
 
-  print('Success: Pana score meets the requirement.');
+  print('Success: Score meets the threshold.');
 }