Files
Gabriel Miranda 80905f69da chore(ci): harden security (#3505)
Signed-off-by: gabriel miranda <gabriel@resend.com>
2026-05-13 14:49:06 -03:00

48 lines
1.6 KiB
YAML

name: Bump
on:
push:
branches:
- canary
concurrency: ${{ github.workflow }}-${{ github.ref }}
jobs:
bump:
timeout-minutes: 30
runs-on: depot-ubuntu-22.04-2
permissions:
contents: write
pull-requests: write
container:
image: node:24
steps:
- name: Generate GitHub App token
id: app-token
uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349
with:
app-id: ${{ secrets.BOT_APP_ID }}
private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
permission-contents: write
permission-pull-requests: write
- name: Checkout Repo
uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
with:
fetch-depth: 1
token: ${{ steps.app-token.outputs.token }}
- run: git config --global --add safe.directory $GITHUB_WORKSPACE
- name: pnpm setup
uses: pnpm/action-setup@738f428026a1f5a72398de22aeed83d859c4a660
- name: Install packages
run: pnpm install --frozen-lockfile --prefer-offline
- name: Configure version bump git user
run: |
git config user.name "resend-version-bump[bot]"
git config user.email "277115511+resend-version-bump[bot]@users.noreply.github.com"
- name: Create "version packages" pull request
uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf
with:
version: pnpm run version
title: "chore(root): version packages"
commitMode: git-cli
setupGitUser: false
env:
GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}