Files
NativeScript/.github/workflows/npm_release_webpack.yml
dependabot[bot] f0c6e95c6e chore(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 (#10863)
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](ec9f2d5744...f4a75cfd61)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-01 11:05:38 -07:00

50 lines
1.4 KiB
YAML

name: '@nativescript/webpack -> npm'
permissions:
contents: read
pull-requests: write
on:
push:
branches: [ 'main' ]
paths:
- 'packages/webpack/**'
env:
NPM_TAG: 'next'
jobs:
release:
runs-on: ubuntu-latest
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
with:
egress-policy: audit
- uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
- name: Setup
run: npm install
- name: Generate Version
working-directory: packages/webpack
run: |
echo NPM_VERSION=$(node -e "console.log(require('./package.json').version);")-$NPM_TAG-$(date +"%m-%d-%Y")-$GITHUB_RUN_ID >> $GITHUB_ENV
- name: Bump Version
working-directory: packages/webpack
run: npm version $NPM_VERSION
- name: Build @nativescript/webpack
run: npx nx run webpack:build
- name: Publish @nativescript/webpack
working-directory: dist/packages/webpack5
env:
NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
run: |
echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ../../.npmrc
echo "Publishing @nativescript/webpack@$NPM_VERSION to NPM with tag $NPM_TAG..."
npm publish --tag $NPM_TAG --dry-run