Skip to content

Release v3.3.0#112

Open
mo4islona wants to merge 10 commits intomasterfrom
develop
Open

Release v3.3.0#112
mo4islona wants to merge 10 commits intomasterfrom
develop

Conversation

@mo4islona
Copy link
Collaborator

Summary

  • Update release workflow for npm trusted publishing (OIDC, npm upgrade step, remove token auth)
  • Bump version to 3.3.0
  • Prompt on pg deletion
  • Remove Discord from error message
  • Update run.js

Test plan

  • Verify release workflow runs successfully with OIDC auth
  • Test sqd deploy prompt on pg deletion

🤖 Generated with Claude Code

Copilot AI review requested due to automatic review settings March 17, 2026 07:06
run: echo "version=$(node -p "require('./package.json').version")" >> $GITHUB_OUTPUT

- name: Create GitHub Release
uses: softprops/action-gh-release@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Release' step
Uses Step
uses 'softprops/action-gh-release' with ref 'v2', not a pinned commit hash
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Release-focused update that bumps the CLI to v3.3.0, adjusts release automation for npm trusted publishing, and adds a safety prompt to prevent accidental Postgres data loss during deploys.

Changes:

  • Updated GitHub Actions release workflow for OIDC-based npm publishing (and modernized action/node versions).
  • Added an interactive confirmation when a deploy would remove an existing Postgres addon.
  • Bumped package version to 3.3.0 and tweaked metadata / messaging (removed Discord reference).

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
src/deploy-command.ts Removes Discord from “unexpected deploy error” reporting instructions.
src/commands/deploy.ts Adds detection + user confirmation flow when manifest removes addons.postgres from an existing squid.
package.json Bumps version to 3.3.0 and switches repository to an HTTPS object form.
bin/run.js No functional change (diff is formatting/line numbering only).
.github/workflows/release.yml Adds OIDC permissions, updates actions/node, removes token-based npm auth, and publishes via npm publish.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants