murashit_codex-panel/.github/workflows/release.yml
dependabot[bot] 5df20eb703
Bump actions/attest
Bumps [actions/attest](https://github.com/actions/attest) from 281a49d4cbb0a72c9575a50d18f6deb515a11deb to 59d89421af93a897026c735860bf21b6eb4f7b26.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](281a49d4cb...59d89421af)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 59d89421af93a897026c735860bf21b6eb4f7b26
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-29 04:35:27 +00:00

71 lines
1.8 KiB
YAML

name: Release
on:
push:
tags:
- "*.*.*"
permissions:
contents: write
id-token: write
attestations: write
jobs:
release:
name: Build and release
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
persist-credentials: false
- name: Setup Node.js
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
with:
node-version: 24
package-manager-cache: false
- name: Install dependencies
run: npm ci --ignore-scripts
- name: Check release version
run: npm run release:check
env:
RELEASE_VERSION: ${{ github.ref_name }}
- name: Run checks and build
run: npm run check
- name: Generate artifact attestations
uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4
with:
subject-path: |
main.js
manifest.json
styles.css
- name: Create GitHub release
env:
GH_TOKEN: ${{ github.token }}
TAG: ${{ github.ref_name }}
run: |
NOTES_FILE=".github/release-notes/$TAG.md"
if [ ! -f "$NOTES_FILE" ]; then
echo "Release notes file is required at $NOTES_FILE"
exit 1
fi
if gh release view "$TAG" >/dev/null 2>&1; then
gh release edit "$TAG" \
--title "$TAG" \
--notes-file "$NOTES_FILE" \
--verify-tag
else
gh release create "$TAG" \
main.js manifest.json styles.css \
--title "$TAG" \
--notes-file "$NOTES_FILE" \
--verify-tag
fi