Skip to content

ci: add release-please workflow with npm trusted publishers - #8

Merged
amondnet merged 4 commits into
mainfrom
ci/release-please
Feb 5, 2026
Merged

amondnet merged 4 commits into
mainfrom
ci/release-please

Conversation

@amondnet

@amondnet amondnet commented Feb 5, 2026

Copy link
Copy Markdown
Contributor

Summary

Add automated release management using release-please GitHub Action with npm OIDC trusted publishing support.

Changes

  • GitHub Action Workflow (.github/workflows/release-please.yml):

    • Automatically creates release PRs when commits are pushed to main
    • Generates changelog from conventional commit messages
    • Creates GitHub releases with proper tags
    • Publishes to npm using OIDC trusted publishing (no token required)
  • Release Configuration (release-please-config.json):

    • Release type: node (Node.js package conventions)
    • Package name: rpg-please
    • Semantic versioning with pre-major bump settings
    • Version tags: v0.1.0 format
  • Version Manifest (.release-please-manifest.json):

    • Current version: 0.1.0

Benefits

✅ Automated changelog generation from conventional commits
✅ Automated version bumping following semantic versioning
✅ No manual release process needed
✅ npm trusted publishers (OIDC) - no token management, automatic provenance
✅ Consistent release process across team

Next Steps

After merging:

  1. Configure npm trusted publisher at https://www.npmjs.com/package/rpg-please/access
    • Organization: pleaseai
    • Repository: pleaseai/rpg
    • Workflow: release-please.yml
    • Environment: publish (optional)
  2. Uncomment the npm publish line in workflow (line 43)
  3. Push conventional commits to main → release-please creates release PR automatically
  4. Merge release PR → automatic npm publish with provenance

Related

- Add release-please GitHub Action workflow for automated releases
- Configure npm OIDC trusted publishing (no token needed)
- Set release type to 'node' for Node.js package conventions
- Track version 0.1.0 in manifest
@dosubot dosubot Bot added size:M This PR changes 30-99 lines, ignoring generated files. enhancement type:feature New feature or request labels Feb 5, 2026
Shorter, cleaner name since scope already identifies the organization.
- External: lancedb, better-sqlite3, surrealdb, tree-sitter
- Build all entry points: index.js, cli.js, mcp/server.js
- Fix shebang to #!/usr/bin/env node for Node.js compatibility
- Reduces dist size from 66MB+ to ~12MB
- Fix multiple spaces in release-please.yml
- Fix regex backtracking vulnerability in llm.ts
@amondnet
amondnet merged commit d232c84 into main Feb 5, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement size:M This PR changes 30-99 lines, ignoring generated files. type:feature New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant