From ad36103cb6dcc37e6764983f92fe5770c154cf3b Mon Sep 17 00:00:00 2001 From: Lucas McDonald Date: Thu, 23 Jul 2026 12:21:57 -0700 Subject: [PATCH 1/2] fix(release): omit --dist-tag when the input is deleted --- .github/workflows/prod-release.yml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/.github/workflows/prod-release.yml b/.github/workflows/prod-release.yml index bb00bfb85..7e43d65fe 100644 --- a/.github/workflows/prod-release.yml +++ b/.github/workflows/prod-release.yml @@ -11,7 +11,7 @@ on: description: '[Optional] Override semantic versioning with explict version (allowed values: "patch", "minor", "major", or explicit version)' default: '' dist_tag: - description: 'NPM distribution tag' + description: 'NPM dist-tag to publish under; delete to publish without an explicit dist-tag' required: false default: 'latest' @@ -109,10 +109,16 @@ jobs: run: npm install -g npm@latest - run: npm ci - run: npm run build --if-present - - run: npx lerna publish from-package --yes --dist-tag "$DIST_TAG" + - name: Publish env: NPM_CONFIG_PROVENANCE: true DIST_TAG: ${{ github.event.inputs.dist_tag }} + run: | + if [ -n "$DIST_TAG" ]; then + npx lerna publish from-package --yes --dist-tag "$DIST_TAG" + else + npx lerna publish from-package --yes + fi # Once publishing is complete, validate that the published packages are useable validate: From 05a8aeb0c1efc28e1be052ba0824df4a515862b7 Mon Sep 17 00:00:00 2001 From: Lucas McDonald Date: Thu, 23 Jul 2026 14:23:12 -0700 Subject: [PATCH 2/2] fix(release): publish with --concurrency 1 Serialize package publishes so we don't submit 27 provenance attestations to the Rekor transparency log in parallel, reducing timeout-induced 409s. --- .github/workflows/prod-release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/prod-release.yml b/.github/workflows/prod-release.yml index 7e43d65fe..88d4d9ce1 100644 --- a/.github/workflows/prod-release.yml +++ b/.github/workflows/prod-release.yml @@ -115,9 +115,9 @@ jobs: DIST_TAG: ${{ github.event.inputs.dist_tag }} run: | if [ -n "$DIST_TAG" ]; then - npx lerna publish from-package --yes --dist-tag "$DIST_TAG" + npx lerna publish from-package --yes --concurrency 1 --dist-tag "$DIST_TAG" else - npx lerna publish from-package --yes + npx lerna publish from-package --yes --concurrency 1 fi # Once publishing is complete, validate that the published packages are useable