Skip to content

Bump shelljs from 0.8.3 to 0.8.5 #43

Bump shelljs from 0.8.3 to 0.8.5

Bump shelljs from 0.8.3 to 0.8.5 #43

Workflow file for this run

name: Publish Checks
on:
pull_request:
types: [opened, synchronize, reopened, edited, closed]
branches:
- master
paths-ignore:
- ".github/**"
- ".npmignore"
jobs:
Builds:
runs-on: ubuntu-latest
# Build for multiple node versions.
strategy:
matrix:
node-version: [12.x, 14.x]
steps:
- uses: actions/checkout@v2
- name: Build on Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v1
with:
node-version: ${{ matrix.node-version }}
- run: npm ci --ignore-scripts
- run: npm run build --if-present
name: Build
Check-Versions:
needs: [Builds]
if: github.event.pull_request.merged == false && github.event.action != 'closed'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
with:
ref: ${{ github.base_ref }}
- name: Get Target Version
run: |
versionText=$(cat package.json | jq -r '.version')
echo "TARGET_VERSION=$(echo $versionText)" >> $GITHUB_ENV
versionText=$(cat package-lock.json | jq -r '.version')
echo "TARGET_LOCK_VERSION=$(echo $versionText)" >> $GITHUB_ENV
- uses: actions/checkout@v2
- name: Get Source Version
run: |
versionText=$(cat package.json | jq -r '.version')
echo "SOURCE_VERSION=$(echo $versionText)" >> $GITHUB_ENV
versionText=$(cat package-lock.json | jq -r '.version')
echo "SOURCE_LOCK_VERSION=$(echo $versionText)" >> $GITHUB_ENV
- uses: actions/checkout@v2
- name: Compare Versions
run: |
echo ${{ env.TARGET_VERSION }}
echo ${{ env.TARGET_LOCK_VERSION }}
echo ${{ env.SOURCE_VERSION }}
echo ${{ env.SOURCE_LOCK_VERSION }}
versionFunction() {
test "$(echo -e "$1\n$2" | sort -V | head -n 1)" != "$1";
}
if versionFunction ${{ env.SOURCE_VERSION }} ${{ env.TARGET_VERSION }}
then
echo "${{ env.SOURCE_VERSION }} is greater than ${{ env.TARGET_VERSION }}"
else
echo ::warning file={package.json},line={1},title={Bump Version}::{You must bump the version before publishing this package}
echo "VERSION_FAILURE=1" >> $GITHUB_ENV
fi
if versionFunction ${{ env.SOURCE_LOCK_VERSION }} ${{ env.TARGET_LOCK_VERSION }}
then
echo "${{ env.SOURCE_LOCK_VERSION }} is greater than ${{ env.TARGET_LOCK_VERSION }}"
else
echo ::warning file={package-lock.json},line={1},title={Bump Version}::{You must bump the version before publishing this package}
echo "VERSION_FAILURE=1" >> $GITHUB_ENV
fi
- name: Comment On Pull Request
if: ${{ env.VERSION_FAILURE == 1}}
uses: actions/github-script@v6
with:
script: |
github.rest.issues.createComment({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
body: ":rotating_light: Don't forget to bump the versions in package.json and package-lock.json! :rotating_light:"
})
- name: Fail
if: ${{ env.VERSION_FAILURE == 1}}
run: exit 1
Publish-Package:
needs: [Builds]
if: github.event.pull_request.merged == true && github.event.action == 'closed'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-node@v1
with:
node-version: 14
- name: Publish
# VERY IMPORTANT NOT TO RUN SCRIPTS TO PROTECT FROM MALICIOUS PACKAGES
run: |
npm config set //registry.npmjs.org/:_authToken ${NPM_TOKEN}
npm publish --ignore-scripts
env:
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}