mirror of
https://github.com/NativeScript/NativeScript.git
synced 2025-11-05 13:26:48 +08:00
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](ec9f2d5744...f4a75cfd61)
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.13.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
58 lines
1.7 KiB
YAML
58 lines
1.7 KiB
YAML
name: '@nativescript/core -> npm'
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
|
|
on:
|
|
push:
|
|
branches: [ 'main' ]
|
|
paths:
|
|
- 'packages/core/**'
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
NPM_TAG: 'next'
|
|
NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
|
|
|
|
- name: Setup
|
|
run: npm run setup
|
|
|
|
- name: Derive appropriate SHAs for base and head for `nx affected` commands
|
|
uses: nrwl/nx-set-shas@826660b82addbef3abff5fa871492ebad618c9e1 # v4.3.3
|
|
with:
|
|
main-branch-name: 'main'
|
|
|
|
- name: Generate Version
|
|
working-directory: packages/core
|
|
run: |
|
|
echo NPM_VERSION=$(node -e "console.log(require('./package.json').version);")-$NPM_TAG-$(date +"%m-%d-%Y")-$GITHUB_RUN_ID >> $GITHUB_ENV
|
|
|
|
- name: Bump Version
|
|
working-directory: packages/core
|
|
run: npm version $NPM_VERSION
|
|
|
|
# TODO: build ui-mobile-base first
|
|
- name: Build @nativescript/core
|
|
run: npx nx build core
|
|
|
|
- name: Publish @nativescript/core
|
|
working-directory: dist/packages/core
|
|
env:
|
|
NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
|
|
run: |
|
|
echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
|
|
echo "Publishing @nativescript/core@$NPM_VERSION to NPM with tag $NPM_TAG..."
|
|
npm publish --tag $NPM_TAG --access public
|