b4fc0ecaa1
* fix(release): publish from explicit source checkpoints Dispatch preparation and publication against a frozen release branch. Bind package builds and provenance to the same tagged commit, enable release-branch PR CI, and document the maintainer workflow. Assisted-by: Sakuya (gensokyo-skills:sakuya-checkpointed-execution) * fix(release): stop publication when the checkpoint has moved Reject unknown phases and a release-branch tip that differs from the dispatch SHA before Release Please creates a tag. Keep registry jobs and catalog pushes on their own phase, and run website checks for release PRs. * fix(release): require a token that can trigger release CI Stop falling back to GITHUB_TOKEN, which cannot start workflow runs for the release pull request it creates. * test(release): require the CI-capable release token Lock the workflow to RELEASE_PLEASE_TOKEN and fail preparation when that secret is missing. * style(release): format the release-token test --------- Co-authored-by: N0zoM1z0 <1705004398@qq.com> Co-authored-by: Cursor Agent <cursoragent@cursor.com>
32 lines
758 B
YAML
32 lines
758 B
YAML
name: Website checks
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [main, "release/*"]
|
|
paths:
|
|
- "website/**"
|
|
- "scripts/verify-website.py"
|
|
- "scripts/prepare-website.py"
|
|
- ".github/workflows/**"
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: website-check-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
check:
|
|
name: Website checks
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 5
|
|
steps:
|
|
- name: Check out the repository
|
|
uses: actions/checkout@v4
|
|
- name: Prepare the example download
|
|
run: python3 scripts/prepare-website.py
|
|
- name: Check website links and publishing configuration
|
|
run: python3 scripts/verify-website.py
|