mirror of
https://github.com/modelstudioai/cli.git
synced 2026-09-14 19:49:23 +08:00
780ca6addb
- 删除了单独的 publish-knowledge.yml 工作流 - 在 publish.yml 中添加 package 输入以支持多包发布 - 根据 package 选择性传递 --knowledge 标志给发布脚本 - 更新并重命名发布任务以反映 package 区别 - 修改并扩展并发组以包含 package 维度 - 注释更新,说明 knowledge-studio-cli 通过主工作流发布并共享依赖
94 lines
2.8 KiB
YAML
94 lines
2.8 KiB
YAML
name: Publish
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
package:
|
|
description: "Which package set to publish"
|
|
required: true
|
|
type: choice
|
|
options:
|
|
- bailian-cli
|
|
- knowledge-studio-cli
|
|
mode:
|
|
description: "Publish mode"
|
|
required: true
|
|
type: choice
|
|
options:
|
|
- channel
|
|
- stable
|
|
channel:
|
|
description: "dist-tag (channel mode only, e.g. mcp/plugin/advisor)"
|
|
required: false
|
|
type: string
|
|
|
|
concurrency:
|
|
group: publish-${{ inputs.package }}-${{ inputs.mode }}-${{ inputs.channel }}
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
publish-stable:
|
|
if: inputs.mode == 'stable'
|
|
name: publish stable (${{ inputs.package }}) to npm + tag
|
|
runs-on: ubuntu-latest
|
|
environment: production # Required Reviewers gate
|
|
permissions:
|
|
contents: write # push lightweight tag to origin
|
|
id-token: write # OIDC for npm Trusted Publishing + provenance
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
|
|
- uses: pnpm/action-setup@v6
|
|
|
|
- uses: actions/setup-node@v6
|
|
with:
|
|
node-version: "24"
|
|
cache: pnpm
|
|
registry-url: "https://registry.npmjs.org/"
|
|
|
|
- name: Install gitleaks
|
|
run: |
|
|
set -euo pipefail
|
|
GITLEAKS_VERSION=8.21.2
|
|
curl -sSfL \
|
|
"https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" \
|
|
| sudo tar -xz -C /usr/local/bin gitleaks
|
|
gitleaks version
|
|
|
|
- run: pnpm install --frozen-lockfile
|
|
|
|
- name: publish-stable
|
|
run: node tools/release/publish-stable.mjs ${{ inputs.package == 'knowledge-studio-cli' && '--knowledge' || '' }}
|
|
|
|
publish-channel:
|
|
if: inputs.mode == 'channel'
|
|
name: publish channel (${{ inputs.package }}) to npm
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read # no tag, no Release; just publish
|
|
id-token: write # OIDC for npm Trusted Publishing + provenance
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
|
|
- uses: pnpm/action-setup@v6
|
|
|
|
- uses: actions/setup-node@v6
|
|
with:
|
|
node-version: "24"
|
|
cache: pnpm
|
|
registry-url: "https://registry.npmjs.org/"
|
|
|
|
- name: Install gitleaks
|
|
run: |
|
|
set -euo pipefail
|
|
GITLEAKS_VERSION=8.21.2
|
|
curl -sSfL \
|
|
"https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" \
|
|
| sudo tar -xz -C /usr/local/bin gitleaks
|
|
gitleaks version
|
|
|
|
- run: pnpm install --frozen-lockfile
|
|
|
|
- name: publish-channel
|
|
run: node tools/release/publish-channel.mjs ${{ inputs.package == 'knowledge-studio-cli' && '--knowledge' || '' }} --channel "${{ inputs.channel }}"
|