mirror of
https://github.com/nvm-sh/nvm.git
synced 2026-10-24 15:23:42 +08:00
6798d1dbc9
In GitHub Actions, `gh` refuses to run without a token, and `release-notes.sh` fails closed on `gh` errors, so the `make release` dry run died once the script was checked in. The workflow already permits `api.github.com` egress and only needs the default read-only token.
41 lines
1.2 KiB
YAML
41 lines
1.2 KiB
YAML
name: 'Tests: release process'
|
|
|
|
on: [pull_request, push]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@v2
|
|
with:
|
|
allowed-endpoints:
|
|
github.com:443
|
|
api.github.com:443
|
|
objects.githubusercontent.com:443
|
|
raw.githubusercontent.com:443
|
|
release-assets.githubusercontent.com:443
|
|
registry.npmjs.org:443
|
|
- uses: actions/checkout@v6
|
|
with:
|
|
fetch-tags: true
|
|
- uses: actions/setup-node@v6
|
|
with:
|
|
node-version: "14"
|
|
- run: npm install
|
|
- name: Configure git
|
|
run: |
|
|
git config user.name github-actions
|
|
git config user.email github-actions@github.com
|
|
git fetch --unshallow --tags -f || git fetch --tags -f
|
|
- name: Attempt `make release` process
|
|
run: echo proceed | make TAG=99.99.99 release
|
|
env:
|
|
GIT_EDITOR: "sed -i '1 s/^/99.99.99 make release test/'"
|
|
GH_TOKEN: ${{ github.token }}
|
|
- name: Ensure tag is created
|
|
run: git tag | grep v99.99.99
|