Skip to content

fix(ci): dedupe release #890

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
avivkeller merged 1 commit into from
Jul 11, 2026
+1 −14
Merged

fix(ci): dedupe release #890

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 1 addition & 14 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,25 +34,12 @@ jobs:
# For npm OIDC (https://docs.npmjs.com/trusted-publishers)
id-token: write
steps:
- name: Harden Runner
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
with:
# `audit` (not `block`) because the publish step reaches many endpoints (npm registry,
# sigstore provenance, the GitHub API, git push, Slack); a wrong allowlist would break a
# release. Egress is still recorded for review.
egress-policy: audit

- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
# Changesets needs full history (and credentials) to push the version branch and tags.
fetch-depth: 0

- name: Setup environment
uses: nodejs/web-team/actions/setup-environment@9f3c83af227d721768d9dbb63009a47ed4f4282f
with:
use-version-file: true
registry-url: 'https://registry.npmjs.org'
fetch-depth: 0
Comment thread
avivkeller marked this conversation as resolved.

- name: Create Release Pull Request or Publish
id: changesets
Expand Down
Loading