2 Commits

Author	SHA1	Message	Date
Tyler Slaton	fe685eb46f	feat(release): npm release scopes for bot(+bot-ui) and bot-slack ... - release.config.json: 'bot' scope versions @copilotkit/bot and @copilotkit/bot-ui together (sharedVersion: true, source: bot); 'bot-slack' is its own scope, mirroring the angular precedent - ReleaseScope type + VALID_SCOPES arrays + usage strings extended across release scripts - stable-release.yml / publish-release.yml: scope choice options - bot, bot-ui, bot-slack manifests: drop private, add publishConfig (public), repository/homepage/keywords, publint/attw targets; first release v0.0.1 - internal bot-package deps use workspace:~ (tilde): caret on a 0.0.x version pins the exact patch, tilde tracks the 0.0.x line; core/shared stay workspace:^ (caret is correct at 1.x) Verified: release-script tests 85/85; prepare-release --scope bot --dry-run bumps bot AND bot-ui in lockstep; actionlint clean on touched lines. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 12:57:13 -07:00
Jordan Ritter	25299bc390	fix(ci): separate build from publish to isolate NPM_TOKEN ... Remove pnpm run build (and pnpm run test) calls from publish-release.ts and prerelease.ts so that repository build code never executes with NPM_TOKEN in the environment. The CI build job (contents: read, no secrets) now handles all building and testing, uploading pre-built artifacts for the publish job to consume. For prerelease: extract version bumping into a new bump-prerelease.ts script that runs in the build job before the build step, ensuring the built artifacts contain the correct canary version numbers. Also fix prerelease build job to use persist-credentials: false, matching the publish-release build job pattern.	2026-05-15 09:13:36 -07:00