Skip to content

Keep GitHub releases independent of registry publishing #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hbashton merged 1 commit into from
Jul 31, 2026
Merged

Keep GitHub releases independent of registry publishing #6

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
308 changes: 189 additions & 119 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -79,123 +79,7 @@ jobs:
done
ls -la release_files/

- name: Set up Node.js (for npm publish)
uses: actions/setup-node@v6
with:
node-version: "24"
registry-url: "https://registry.npmjs.org/"

- name: Set up .NET SDK (for NuGet publish)
uses: actions/setup-dotnet@v5
with:
dotnet-version: "8.0.x"

# Acquire short-lived NuGet API key via OIDC Trusted Publishing
- name: NuGet login (OIDC → temp API key)
id: login
uses: NuGet/login@v1.2.0
with:
user: ${{ secrets.NUGET_USER }}

# Publish client libraries to npm and NuGet using OIDC trusted publishing
- name: Publish TypeScript client library to npm
working-directory: release_files
shell: bash
run: |
set -euo pipefail
TS_TARBALL="viiper-typescript-client-library.tgz"
if [ ! -f "$TS_TARBALL" ]; then
echo "ERROR: Missing TypeScript client library tarball: $TS_TARBALL" >&2
ls -la
exit 1
fi
echo "Extracting version from package.json inside tarball..."
PKG_VERSION=$(tar -xOzf "$TS_TARBALL" package/package.json | grep '"version"' | head -1 | sed -E 's/.*"version" *: *"([^"]+)".*/\1/')
PKG_NAME=$(tar -xOzf "$TS_TARBALL" package/package.json | grep '"name"' | head -1 | sed -E 's/.*"name" *: *"([^"]+)".*/\1/')
if [ -z "$PKG_VERSION" ]; then
echo "ERROR: Failed to extract version from TypeScript client library tarball" >&2
exit 1
fi
if [ -z "$PKG_NAME" ]; then
echo "ERROR: Failed to extract package name from TypeScript client library tarball" >&2
exit 1
fi
echo "Package version: $PKG_VERSION"
echo "Package name: $PKG_NAME"
echo "Checking if $PKG_NAME@$PKG_VERSION already exists on npm..."
if npm view "$PKG_NAME@$PKG_VERSION" version >/dev/null 2>&1; then
echo "npm package $PKG_NAME@$PKG_VERSION already exists. Skipping npm publish (idempotent re-run)."
exit 0
fi
# Determine npm dist-tag
if [[ "$PKG_VERSION" == *-* ]]; then
NPM_TAG="dev"
else
NPM_TAG="latest"
fi
echo "Using npm dist-tag: $NPM_TAG"
# Remove deprecated always-auth config if present
npm config delete always-auth || true
npm publish "$TS_TARBALL" --provenance --access public --tag "$NPM_TAG"

- name: Publish C# client library to NuGet
working-directory: release_files
shell: bash
run: |
set -euo pipefail
NUPKG="viiper-csharp-client-library-nupkg.nupkg"
if [ ! -f "$NUPKG" ]; then
echo "ERROR: Missing C# client library package: $NUPKG" >&2
ls -la
exit 1
fi
echo "Publishing NuGet package: $NUPKG"
dotnet nuget push "$NUPKG" --api-key "${{ steps.login.outputs.NUGET_API_KEY }}" --source https://api.nuget.org/v3/index.json --skip-duplicate

- name: Set up Rust (for crates.io publish)
uses: dtolnay/rust-toolchain@stable

- name: Authenticate with crates.io (OIDC)
id: crates_io_auth
uses: rust-lang/crates-io-auth-action@v1.0.4

- name: Publish Rust client library to crates.io
working-directory: release_files
shell: bash
env:
CARGO_REGISTRY_TOKEN: ${{ steps.crates_io_auth.outputs.token }}
run: |
set -euo pipefail
CRATE="viiper-rust-client-library.crate"
if [ ! -f "$CRATE" ]; then
echo "ERROR: Missing Rust client library crate: $CRATE" >&2
ls -la
exit 1
fi
echo "Extracting crate to publish..."
mkdir -p ../rust-publish
tar -xzf "$CRATE" -C ../rust-publish
CRATE_DIR=$(ls -d ../rust-publish/viiper-client-*)
cd "$CRATE_DIR"
echo "Removing reserved backup files (if any)..."
find . -name 'Cargo.toml.orig' -print -delete || true
CRATE_VERSION=$(grep '^version' Cargo.toml | head -1 | sed -E 's/.*"([^"]+)".*/\1/')
CRATE_NAME="viiper-client"
if [ -z "$CRATE_VERSION" ]; then
echo "ERROR: Failed to extract version from Cargo.toml" >&2
exit 1
fi
echo "Crate version: $CRATE_VERSION"
echo "Crate name: $CRATE_NAME"
echo "Checking if $CRATE_NAME@$CRATE_VERSION already exists on crates.io..."
if cargo search "$CRATE_NAME" 2>/dev/null | grep -q "^$CRATE_NAME = \"$CRATE_VERSION\""; then
echo "Crate $CRATE_NAME@$CRATE_VERSION already exists. Skipping cargo publish (idempotent re-run)."
exit 0
fi
echo "Publishing crate with OIDC trusted publishing..."
cargo publish --allow-dirty

- name: Extract build info
- name: Extract build info
id: build_info
shell: bash
run: |
Expand Down Expand Up @@ -245,5 +129,191 @@ jobs:
files: release_files/*
prerelease: false
draft: false
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

publish-client-registries:
name: Publish client libraries (best effort)
needs: create-release
runs-on: ubuntu-latest
continue-on-error: true
permissions:
contents: read
id-token: write
steps:
- name: Download all artifacts
uses: actions/download-artifact@v8
with:
path: artifacts

- name: Organize client library artifacts
shell: bash
run: |
set -euo pipefail
mkdir -p release_files
for dir in artifacts/*; do
if [ -d "$dir" ]; then
base="$(basename "$dir")"
name_no_suffix="${base%-Release}"
for file in "$dir"/*; do
if [ -f "$file" ]; then
filename="$(basename "$file")"
if [[ "$filename" == *.tar.gz ]]; then
ext="tar.gz"
else
ext="${filename##*.}"
fi
fname="viiper-${name_no_suffix#VIIPER-}"
if [[ "$filename" == *.* ]]; then
cp "$file" "release_files/${fname}.${ext}"
else
cp "$file" "release_files/${fname}"
fi
fi
done
fi
done
ls -la release_files/

- name: Set up Node.js (for npm publish)
id: setup_node
continue-on-error: true
uses: actions/setup-node@v6
with:
node-version: "24"
registry-url: "https://registry.npmjs.org/"

- name: Publish TypeScript client library to npm
id: publish_npm
if: ${{ steps.setup_node.outcome == 'success' }}
continue-on-error: true
working-directory: release_files
shell: bash
run: |
set -euo pipefail
TS_TARBALL="viiper-typescript-client-library.tgz"
if [ ! -f "$TS_TARBALL" ]; then
echo "::notice::Skipping npm publish: missing $TS_TARBALL"
exit 0
fi
PKG_VERSION=$(tar -xOzf "$TS_TARBALL" package/package.json | grep '"version"' | head -1 | sed -E 's/.*"version" *: *"([^"]+)".*/\1/')
PKG_NAME=$(tar -xOzf "$TS_TARBALL" package/package.json | grep '"name"' | head -1 | sed -E 's/.*"name" *: *"([^"]+)".*/\1/')
if [ -z "$PKG_VERSION" ] || [ -z "$PKG_NAME" ]; then
echo "::warning::Skipping npm publish: package metadata could not be read"
exit 0
fi
if npm view "$PKG_NAME@$PKG_VERSION" version >/dev/null 2>&1; then
echo "npm package $PKG_NAME@$PKG_VERSION already exists; skipping."
exit 0
fi
if [[ "$PKG_VERSION" == *-* ]]; then
NPM_TAG="dev"
else
NPM_TAG="latest"
fi
npm config delete always-auth || true
npm publish "$TS_TARBALL" --provenance --access public --tag "$NPM_TAG"

- name: Check NuGet publishing configuration
id: nuget_config
shell: bash
env:
NUGET_USER: ${{ secrets.NUGET_USER }}
run: |
if [ -z "$NUGET_USER" ]; then
echo "enabled=false" >> "$GITHUB_OUTPUT"
echo "::notice::Skipping NuGet publish: NUGET_USER is not configured"
else
echo "enabled=true" >> "$GITHUB_OUTPUT"
fi

- name: Set up .NET SDK (for NuGet publish)
id: setup_dotnet
if: ${{ steps.nuget_config.outputs.enabled == 'true' }}
continue-on-error: true
uses: actions/setup-dotnet@v5
with:
dotnet-version: "8.0.x"

- name: NuGet login (OIDC to temporary API key)
id: nuget_login
if: ${{ steps.nuget_config.outputs.enabled == 'true' && steps.setup_dotnet.outcome == 'success' }}
continue-on-error: true
uses: NuGet/login@v1.2.0
with:
user: ${{ secrets.NUGET_USER }}

- name: Publish C# client library to NuGet
id: publish_nuget
if: ${{ steps.nuget_login.outcome == 'success' }}
continue-on-error: true
working-directory: release_files
shell: bash
run: |
set -euo pipefail
NUPKG="viiper-csharp-client-library-nupkg.nupkg"
if [ ! -f "$NUPKG" ]; then
echo "::notice::Skipping NuGet publish: missing $NUPKG"
exit 0
fi
dotnet nuget push "$NUPKG" --api-key "${{ steps.nuget_login.outputs.NUGET_API_KEY }}" --source https://api.nuget.org/v3/index.json --skip-duplicate

- name: Set up Rust (for crates.io publish)
id: setup_rust
continue-on-error: true
uses: dtolnay/rust-toolchain@stable

- name: Authenticate with crates.io (OIDC)
id: crates_io_auth
if: ${{ steps.setup_rust.outcome == 'success' }}
continue-on-error: true
uses: rust-lang/crates-io-auth-action@v1.0.4

- name: Publish Rust client library to crates.io
id: publish_crates
if: ${{ steps.crates_io_auth.outcome == 'success' }}
continue-on-error: true
working-directory: release_files
shell: bash
env:
CARGO_REGISTRY_TOKEN: ${{ steps.crates_io_auth.outputs.token }}
run: |
set -euo pipefail
CRATE="viiper-rust-client-library.crate"
if [ ! -f "$CRATE" ]; then
echo "::notice::Skipping crates.io publish: missing $CRATE"
exit 0
fi
mkdir -p ../rust-publish
tar -xzf "$CRATE" -C ../rust-publish
CRATE_DIR=$(ls -d ../rust-publish/viiper-client-*)
cd "$CRATE_DIR"
find . -name 'Cargo.toml.orig' -print -delete || true
CRATE_VERSION=$(grep '^version' Cargo.toml | head -1 | sed -E 's/.*"([^"]+)".*/\1/')
CRATE_NAME="viiper-client"
if [ -z "$CRATE_VERSION" ]; then
echo "::warning::Skipping crates.io publish: package metadata could not be read"
exit 0
fi
if cargo search "$CRATE_NAME" 2>/dev/null | grep -q "^$CRATE_NAME = \"$CRATE_VERSION\""; then
echo "Crate $CRATE_NAME@$CRATE_VERSION already exists; skipping."
exit 0
fi
cargo publish --allow-dirty

- name: Summarize optional registry publishing
if: ${{ always() }}
shell: bash
run: |
{
echo "### Optional registry publishing"
echo ""
echo "The GitHub release and binary assets were created before these best-effort steps."
echo ""
echo "- npm: ${{ steps.publish_npm.outcome }}"
echo "- NuGet configured: ${{ steps.nuget_config.outputs.enabled }}"
echo "- NuGet login: ${{ steps.nuget_login.outcome }}"
echo "- NuGet publish: ${{ steps.publish_nuget.outcome }}"
echo "- crates.io authentication: ${{ steps.crates_io_auth.outcome }}"
echo "- crates.io publish: ${{ steps.publish_crates.outcome }}"
} >> "$GITHUB_STEP_SUMMARY"
Loading