kyndryl-open-source/hashi-vault-js

Automatic relase management

Opened this issue · 3 comments

josedev-union commented

Describe the feature/enhancement
I can see that you already bumped the minor version with this commit 5decb74. But there is no matching release published to neither github nor npm package repo. Why can't we have a auto release pipeline?

Expected behavior
I think we can have a gh action workflow which bummp the version and generate releases. Also we can have some trigger conditions like only when commit message includes [release], it triggers the release workflow.

rod4n4m1 commented

@josedev-union This was in my mind for long time, absolutely great idea. Let's work together on this one.

rod4n4m1 commented

Initial thoughts:

  • Create a GitHub Actions workflow with trigger [on push] and [release] message
  • Add SBOM to the release
  • Create signature with hash
  • Publish version onto npmjs.com
rod4n4m1 commented

I just added the first set of workflows. One for creating new releases upon tags with v* pattern. Another to publish the release as a NPM package, still not sure if they are working