chore: publish-sdk

[seeratawan01]

PR Type

enhancement

---

Description

• Removed unnecessary checkout steps in the publish-sdk, publish-nextjs, and publish-react jobs to streamline the workflow.
• Adjusted the order of steps by moving the Install pnpm step before downloading build artifacts for better efficiency.
• Modified the pnpm install command to use --no-frozen-lockfile instead of --frozen-lockfile.
• Improved the overall formatting and removed redundant whitespace for cleaner YAML configuration.

---

Changes walkthrough 📝

	Relevant files
Enhancement	cd-develop.yml Optimize and streamline CI/CD workflow for SDK publishing .github/workflows/cd-develop.yml Removed redundant checkout steps in multiple jobs. Moved Install pnpm step before downloading artifacts. Changed pnpm install command to use --no-frozen-lockfile. Cleaned up whitespace and formatting. +16/-25

---

💡 PR-Agent usage: Comment /help "your question" on any pull request to receive relevant information

[github-actions[bot]]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🏅 Score: 85

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Possible Bug The use of '--no-frozen-lockfile' may lead to inconsistencies in dependencies across installations, which could cause unexpected behavior or bugs in production. Security Concern The environment variable 'NODE_AUTH_TOKEN' is used in multiple steps without explicit masking, which might expose sensitive information in logs.

Code feedback:

---

relevant file	.github/workflows/cd-develop.yml
suggestion	Consider using 'actions/cache@v3' for caching 'pnpm' dependencies to speed up the installation process and reduce build times. [important]
relevant line	run: npm install -g pnpm

---

relevant file	.github/workflows/cd-develop.yml
suggestion	It's recommended to add 'fail-fast: false' to the jobs to ensure that all jobs run even if one fails, which is useful for identifying multiple issues in a single workflow run. [medium]
relevant line	runs-on: ubuntu-latest

---

[github-actions[bot]]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Score
Best practice	Enhance the robustness of the publishing steps by adding error handling ___ **Add error handling for the pnpm publish commands to catch and handle potential failures during the publishing process, improving the robustness of the CI/CD pipeline.** [.github/workflows/cd-develop.yml [140]](https://github.com/usermaven/usermaven-js/pull/145/files#diff-4f501c9619899525498594b20a28ab29c8547673701f9285b403540c8c09762fR140-R140) ```diff -pnpm publish --no-git-checks --tag rc --access public +pnpm publish --no-git-checks --tag rc --access public || { echo "Publishing failed"; exit 1; } ``` Suggestion importance[1-10]: 9 Why: Adding error handling to the `pnpm publish` command is a best practice that enhances the robustness of the CI/CD pipeline by ensuring that failures are caught and handled appropriately.	9
Performance	Reduce build times by caching the pnpm store ___ **Consider adding a step to cache the pnpm store to speed up the installation process in subsequent runs, which can significantly reduce build times.** [.github/workflows/cd-develop.yml [128]](https://github.com/usermaven/usermaven-js/pull/145/files#diff-4f501c9619899525498594b20a28ab29c8547673701f9285b403540c8c09762fR128-R128) ```diff -run: pnpm install --no-frozen-lockfile +- name: Cache pnpm store + uses: actions/cache@v3 + with: + path: ~/.pnpm-store + key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }} +- run: pnpm install --no-frozen-lockfile ``` Suggestion importance[1-10]: 8 Why: Caching the `pnpm` store can significantly reduce build times by avoiding redundant installations, making this a valuable performance improvement for the CI/CD pipeline.	8
Possible issue	Ensure the output of the cat command is utilized effectively ___ **Ensure that the cat command in the Verify package version step outputs to the console or is used in a meaningful way, as currently, it may not be serving any purpose if not checked or logged.** [.github/workflows/cd-develop.yml [132]](https://github.com/usermaven/usermaven-js/pull/145/files#diff-4f501c9619899525498594b20a28ab29c8547673701f9285b403540c8c09762fR132-R132) ```diff +echo "Verifying package version:" cat packages/javascript-sdk/package.json ``` Suggestion importance[1-10]: 6 Why: The suggestion to add an `echo` statement before the `cat` command improves clarity by indicating the purpose of the command output, although it does not address any functional issue.	6