Skip to content

Add release workflow - #2940

Merged
inlined merged 8 commits into
nextfrom
inlined.kit-release-pipeline
Aug 13, 2026
Merged

Add release workflow#2940
inlined merged 8 commits into
nextfrom
inlined.kit-release-pipeline

Conversation

@inlined

@inlined inlined commented Aug 12, 2026

Copy link
Copy Markdown
Member

I think this has to be in main for it to actually be accessible to run. So much for testing before reviewing =/

@inlined
inlined requested a review from ajperel August 12, 2026 21:57
@gemini-code-assist

Copy link
Copy Markdown
Contributor

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@wiz-9635d3485b

wiz-9635d3485b Bot commented Aug 12, 2026

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities -
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations 1 Medium 1 Low
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 1 Medium 1 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

Comment thread .github/workflows/release-kit.yaml Outdated
permissions:
contents: read
steps:
- uses: actions/checkout@v4

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Isn't zizmor going to come through and say this must be a SHA and be right?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, this is still a draft because I'm working through stuff. Trying to figure out what I need to do to get this to show up in the actions dashboard for e.g.

DRY_RUN="${{ inputs.dry_run }}"

if [ "$DRY_RUN" = "true" ]; then
npm version $BUMP_TYPE --preid=rc --no-git-tag-version

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do I understand correctly that this still updates the version locally just doesn't commit it via git. Should we do even this much or revert it later?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We do this because npm publish has a dry run as well which verifies auth and other requirements and will be driven by this.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok. I guess it gets cleaned up at some point? Could be worth a comment since it's an interesting semi real thing happening during dry run.

required: true
type: choice
options:
- "kits/bigquery-firestore-export"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should coordinate with @cabljac and Invertase. If we move definitive location for some of these kits back to the google cloud extensions repo to be next to the Extension implementations we'll need a similar workflow there.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, there's some stuff we can play with like making the branch configurable or making this not prefill. Easy changes that don't block getting started testing this though IMO.

@inlined inlined left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry this stayed in draft a while. I had one branch for multiple changes because Gemini lied to me and said I could try to run the action from a branch. Now I'm not entirely sure that's true and I'm trying to split changes across different branches with different base targets which is reasonably annoying.

Comment thread .github/workflows/release-kit.yaml Outdated
permissions:
contents: read
steps:
- uses: actions/checkout@v4

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, this is still a draft because I'm working through stuff. Trying to figure out what I need to do to get this to show up in the actions dashboard for e.g.

DRY_RUN="${{ inputs.dry_run }}"

if [ "$DRY_RUN" = "true" ]; then
npm version $BUMP_TYPE --preid=rc --no-git-tag-version

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We do this because npm publish has a dry run as well which verifies auth and other requirements and will be driven by this.

required: true
type: choice
options:
- "kits/bigquery-firestore-export"

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, there's some stuff we can play with like making the branch configurable or making this not prefill. Easy changes that don't block getting started testing this though IMO.

@inlined
inlined marked this pull request as ready for review August 13, 2026 15:29
@inlined
inlined merged commit 8fc5d09 into next Aug 13, 2026
18 checks passed
@inlined
inlined deleted the inlined.kit-release-pipeline branch August 13, 2026 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants