Closed orhun closed 9 months ago
Hm, I haven't used CI-based publish workflows before and am a little wary about them.
Also I need to re-think how I handle this project overall, it's currently dual-hosted on git.sr.ht and GitHub and has no CI at all, which is also rather weird for accepting external contributions 😅
How about this: I want to try out codeberg.org's CI soon anyways, if I don't like it I'll create an initial GitHub Actions CI workflow myself for PRs, and then ping you about the release workflow.
Sounds good! - Just to clarify: what you can do is to use --locked
flag for the CI, not the release workflow. But it can be a part of the release workflow as well for sure.
Ah, well I didn't even make a PR at all when bumping the version, so there was no CI that would have been able to catch the error (prior to releasing). But I'll keep this in mind for future CI workflows to use --locked
when there is a lockfile.
Alright, I've now added a branch protection that applies even to myself and forces me to go through the PR procedure to push stuff to the main branch. CI config is here, feel free to suggest improvements! Test job is commented out because I don't have any tests yet 🥲
Great, applied some suggestions in #21
I would suggest setting up a CI (e.g. GitHub Actions) and build with
--locked
flag to avoid this :)edit: happy to contribute if you want to go with GitHub Actions