Add GitHub Actions release process and publish metadata - #46
Open
mikelittle wants to merge 2 commits into
Open
Conversation
altis-cli had no release process — the last npm publish was manual, ~3 years ago. This adds a Release workflow that publishes to npm on a GitHub Release (gated on tag==package.json version, a CLI smoke test, and an advisory audit), plus PR CI. package.json gains the metadata npm needs for a clean, provenanced publish and an accurate npmjs listing. Process and SemVer guidance live in RELEASING.md. Publishing still needs a human to add the NPM_TOKEN secret and cut the first release. Closes humanmade/product-dev#2158. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The smoke test ran the CLI entry point, which loads config and runs the setup gate before parsing args — so an unconfigured non-TTY exits 1. Build the parser directly instead: still exercises the whole command tree via dynamic imports, without needing config. Entry-point gate fix tracked in #47. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes humanmade/product-dev#2158.
altis-cli had no release process — no workflows, no tags, and the last npm
publish was manual ~3 years ago. This wires up:
tag==package.json version, a CLI smoke test, and an advisory npm audit.
Uses provenance (OIDC).
homepage/bugs, engines (node >=20, required by got@14), keywords, smoke script.
Before the first release works, a human must:
NPM_TOKENrepo secret (npm automation token, write scope on altis-cli).npm version <patch|minor|major>→git push --follow-tags→publish a GitHub Release.
Verified locally: workflows pass action-validator, smoke test exits 0, version
gate passes/fails correctly, and
npm publish --dry-runproduces a clean,warning-free tarball (bin/ + lib/ only).
🤖 Generated with Claude Code