PeculiarVentures / asn1-schema / 40297321538

74%

push

github

ci: release with release-please (#177)

* ci: release with release-please

Replace the lerna workflow_dispatch release in release.yml with the
release-please flow used by @peculiar/utils: Test runs on pull requests
and is called by Release on every push to master; release-please opens a
`chore(release): vX.Y.Z` pull request and, once it is merged, creates the
`vX.Y.Z` tag and GitHub Release, then the workflow publishes every package with
Trusted Publisher. The workflow keeps the release.yml file name and the
npm environment, so the packages' Trusted Publisher settings stay valid.

All 32 packages keep one version. The root package is the only
release-please component, so there is one tag and one GitHub Release per
version; `extra-files` bumps every `packages/*/package.json` version, the
internal `@peculiar/asn1-*` ranges and the lockfile workspace entries.

Remove the lerna `pub`/`prepub` scripts. lerna still runs the build until
the build moves to tsdown.

* ci: harden the release workflow

- check out the publish job without persisted credentials and push the
  major tag with an explicit token, so build and dependency code never
  see the write token in .git/config
- leave the major tag alone when a branch with the same name exists
  (v2/v3), instead of creating an ambiguous refname
- warn when RELEASE_TOKEN is missing, since Test then never runs on the
  release pull request
- bump lerna.json with the packages while lerna is still used
- refer to the Release workflow by its name

577 of 901 branches covered (64.04%)

Branch coverage included in aggregate %.

2675 of 3478 relevant lines covered (76.91%)

179.97 hits per line