openpencil/.github/workflows/build.yml
Danila Poyarkov b7a634f1ae Skip already-published versions in CI npm publish
Prevents re-run failures when a package was already published.
Real errors (auth, build) still fail the job.
2026-03-02 18:37:00 +03:00

109 lines
2.9 KiB
YAML

name: Build
on:
workflow_dispatch:
push:
tags:
- 'v*'
permissions:
contents: write
id-token: write
jobs:
build:
strategy:
fail-fast: false
matrix:
include:
- platform: macos-latest
target: aarch64-apple-darwin
label: macos-arm64
- platform: macos-latest
target: x86_64-apple-darwin
label: macos-x64
- platform: windows-latest
target: x86_64-pc-windows-msvc
label: windows-x64
- platform: windows-latest
target: aarch64-pc-windows-msvc
label: windows-arm64
- platform: ubuntu-22.04
target: x86_64-unknown-linux-gnu
label: linux-x64
runs-on: ${{ matrix.platform }}
steps:
- uses: actions/checkout@v4
- uses: oven-sh/setup-bun@v2
- uses: dtolnay/rust-toolchain@stable
with:
targets: ${{ matrix.target }}
- name: Install dependencies (Linux)
if: startsWith(matrix.platform, 'ubuntu')
run: |
sudo apt-get update
sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
- run: bun install
- name: Extract release notes
id: changelog
uses: ffurrer2/extract-release-notes@v2
- name: Build Tauri
uses: tauri-apps/tauri-action@v0
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY || '' }}
with:
tauriScript: bunx tauri
args: --target ${{ matrix.target }}
tagName: ${{ github.ref_name }}
releaseName: 'OpenPencil ${{ github.ref_name }}'
releaseBody: ${{ steps.changelog.outputs.release_notes }}
releaseDraft: false
publish-npm:
needs: build
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
steps:
- uses: actions/checkout@v4
- uses: oven-sh/setup-bun@v2
- uses: actions/setup-node@v4
with:
node-version: 24.x
registry-url: https://registry.npmjs.org/
- run: bun install
- uses: pnpm/action-setup@v4
with:
version: latest
- name: Publish packages to npm
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
run: |
publish_if_new() {
local dir=$1
local name=$(cd "$dir" && node -p "require('./package.json').name")
local version=$(cd "$dir" && node -p "require('./package.json').version")
if npm view "${name}@${version}" version 2>/dev/null; then
echo "${name}@${version} already published, skipping"
else
cd "$dir" && pnpm publish --provenance --access public --no-git-checks
fi
}
publish_if_new packages/core
publish_if_new packages/cli
publish_if_new packages/mcp