PeculiarVentures / attestation / 40665526335

60%

push

github

ci: align the Test and Release workflows with asn1-schema (#35)

Replace ci.yml with asn1-schema's test.yml: workflow "Test" on
pull_request and workflow_call only (pushes to main are tested once, by
Release), ubuntu-24.04, actions/checkout and setup-node v7, Node 24, and
the generated-exports check. The one extra step runs the built CLI
(`attest --help`), which no other check executes.

publish.yml keeps its name, since the npm Trusted Publisher entries are
tied to it (the asn1-schema exception to rule 12), and now has the steps
of asn1-schema's release.yml: persist-credentials: false, a lockstep
version check, dependency-ordered `npm publish --workspace` that skips
versions already on npm, and the major tag pushed with the job token.

scripts/ is removed. release.mjs and its tests duplicated those publish
steps; smoke.mjs duplicated attw (which checks the packed tarball's files
and exports) apart from the CLI run above. Two safeguards go: retrying an
older tag after a newer release can move npm `latest` backwards (publish
it by hand with a dist-tag instead, as docs/releasing.md now says), and a
registry error now surfaces from `npm publish` rather than `npm view`.

The status check is renamed from "CI / test" to "Test / build".

273 of 424 branches covered (64.39%)

Branch coverage included in aggregate %.

466 of 803 relevant lines covered (58.03%)

492.88 hits per line