gsadmin/gitbook
1
0
Fork 0
mirror of https://github.com/GitbookIO/gitbook.git synced 2026-09-12 05:48:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Use trusted publishing for publishing NPM packages (#3808)

Browse Source
This commit is contained in:
Samy Pessé
2025-11-15 19:26:26 +01:00
committed by GitHub
parent e7cc3ff61f
commit 10995e09ca
19 changed files with 77 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/lazy-toes-look.md
+15
View File
@@ -0,0 +1,15 @@
---
"@gitbook/react-contentkit": patch
"@gitbook/openapi-parser": patch
"@gitbook/browser-types": patch
"@gitbook/react-openapi": patch
"@gitbook/cache-tags": patch
"@gitbook/react-math": patch
"@gitbook/colors": patch
"@gitbook/embed": patch
"@gitbook/fonts": patch
"@gitbook/icons": patch
"@gitbook/expr": patch
---
Use NPM Trusted publishing for publishing the package.
.changeset/social-friends-press.md
+5
View File
@@ -0,0 +1,5 @@
---
"@gitbook/expr": patch
---
Use NPM dependency for eval-estree-expression
.github/workflows/publish.yaml
+6 -4
View File
@@ -5,8 +5,12 @@ on:
branches:
- main
permissions:
id-token: write
contents: read
env:
BUN_NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
BUN_NPM_TOKEN: ${{ secrets.NPM_TOKEN_READONLY }}
concurrency: ${{ github.workflow }}-${{ github.ref }}
@@ -30,12 +34,10 @@ jobs:
id: changesets
uses: changesets/action@v1
with:
publish: npm run release
publish: npm run publish-all-packages
version: npm run changeset-version
env:
# Using a PAT instead of GITHUB_TOKEN because we need to run workflows when releases are created
# https://github.com/orgs/community/discussions/26875#discussioncomment-3253761
GITHUB_TOKEN: ${{ secrets.GH_PERSONAL_TOKEN }}
CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
.gitignore
+4 -1
View File
@@ -25,4 +25,7 @@ yarn-error.log*
# TypeScript
*.tsbuildinfo
.npmrc
.npmrc
# Bun pack artifacts
packages/*/*.tgz
bun.lock
+2 -2
View File
@@ -80,7 +80,7 @@
"acorn-walk": "^8.3.4",
"assert-never": "catalog:",
"escodegen": "^2.1.0",
"eval-estree-expression": "github:jonschlinkert/eval-estree-expression#9cf28d2",
"eval-estree-expression": "github:jonschlinkert/eval-estree-expression#fb0246a",
},
"devDependencies": {
"@tsconfig/node20": "catalog:",
@@ -1951,7 +1951,7 @@
"etag": ["etag@1.8.1", "", {}, "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="],
"eval-estree-expression": ["eval-estree-expression@github:jonschlinkert/eval-estree-expression#9cf28d2", {}, "jonschlinkert-eval-estree-expression-9cf28d2"],
"eval-estree-expression": ["eval-estree-expression@github:jonschlinkert/eval-estree-expression#fb0246a", {}, "jonschlinkert-eval-estree-expression-fb0246a"],
"event-emitter": ["event-emitter@0.3.5", "", { "dependencies": { "d": "1", "es5-ext": "~0.10.14" } }, "sha512-D9rRn9y7kLPnJ+hMq7S/nhvoKwwvVJahBi2BPmx3bvbsEdK3W9ii8cBSGjP+72/LnM4n6fo3+dkCX5FeTQruXA=="],
package.json
+2 -3
View File
@@ -10,7 +10,7 @@
"turbo": "^2.5.8",
"vercel": "^39.4.2"
},
"packageManager": "bun@1.3.0",
"packageManager": "bun@1.3.2",
"overrides": {
"@codemirror/state": "6.4.1",
"@types/react": "catalog:",
@@ -32,8 +32,7 @@
"e2e-customers": "turbo run e2e-customers",
"changeset": "changeset",
"changeset-version": "changeset version && bun run format && bun update",
"release": "turbo run release && bun run publish-all-packages",
"publish-all-packages": "for dir in packages/*; do (cd \"$dir\" && bun publish || true); done && changeset tag",
"publish-all-packages": "turbo run publish-to-npm",
"download:env": "op read op://gitbook-x-dev/gitbook-open/.env.local >> .env.local",
"clean": "turbo run clean"
},
packages/browser-types/package.json
+2 -1
View File
@@ -22,7 +22,8 @@
"scripts": {
"build": "tsdown",
"typecheck": "tsc --noEmit",
"dev": "bun run build -- --watch ./src"
"dev": "bun run build -- --watch ./src",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "README.md", "CHANGELOG.md"],
"publishConfig": {
packages/cache-tags/package.json
+2 -1
View File
@@ -21,7 +21,8 @@
"scripts": {
"build": "tsdown",
"typecheck": "tsc --noEmit",
"dev": "bun run build -- --watch ./src"
"dev": "bun run build -- --watch ./src",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "README.md", "CHANGELOG.md"],
"publishConfig": {
packages/colors/package.json
+2 -1
View File
@@ -17,7 +17,8 @@
"scripts": {
"build": "tsdown",
"typecheck": "tsc --noEmit",
"dev": "bun run build -- --watch ./src"
"dev": "bun run build -- --watch ./src",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "README.md", "CHANGELOG.md"],
"publishConfig": {
packages/embed/package.json
+2 -1
View File
@@ -34,7 +34,8 @@
"build-standalone": "bun build src/standalone/index.ts --bundle --minify --outdir=standalone",
"clean": "rm -rf ./dist",
"typecheck": "tsc --noEmit",
"dev": "bun run build -- --watch ./src"
"dev": "bun run build -- --watch ./src",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "README.md", "CHANGELOG.md"],
"publishConfig": {
packages/expr/package.json
+3 -2
View File
@@ -16,7 +16,7 @@
"acorn-walk": "^8.3.4",
"assert-never": "catalog:",
"escodegen": "^2.1.0",
"eval-estree-expression": "github:jonschlinkert/eval-estree-expression#9cf28d2"
"eval-estree-expression": "github:jonschlinkert/eval-estree-expression#fb0246a"
},
"devDependencies": {
"@tsconfig/strictest": "catalog:",
@@ -33,7 +33,8 @@
"typecheck": "tsc --noEmit",
"unit": "bun test",
"clean": "rm -rf ./dist",
"dev": "bun run build -- --watch ./src"
"dev": "bun run build -- --watch ./src",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "README.md", "CHANGELOG.md"],
"publishConfig": {
packages/fonts/package.json
+2 -1
View File
@@ -24,7 +24,8 @@
"typecheck": "tsc --noEmit",
"dev": "bun run build -- --watch ./src",
"clean": "rm -rf ./dist && rm -rf ./src/data",
"unit": "bun test"
"unit": "bun test",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "bin", "README.md", "CHANGELOG.md"],
"engines": {
packages/icons/package.json
+2 -1
View File
@@ -39,7 +39,8 @@
"typecheck": "tsc --noEmit",
"dev": "bun run build -- --watch ./src",
"clean": "rm -rf ./dist && rm -rf ./src/data",
"unit": "bun test"
"unit": "bun test",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"bin": {
"gitbook-icons": "./bin/gitbook-icons.js"
packages/openapi-parser/package.json
+2 -1
View File
@@ -28,7 +28,8 @@
"typecheck": "tsc --noEmit",
"unit": "bun test",
"dev": "bun run build -- --watch ./src",
"clean": "rm -rf ./dist"
"clean": "rm -rf ./dist",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "README.md", "CHANGELOG.md"],
"publishConfig": {
packages/react-contentkit/package.json
+2 -1
View File
@@ -28,7 +28,8 @@
"build": "tsdown",
"typecheck": "tsc --noEmit",
"dev": "bun run build -- --watch ./src",
"clean": "rm -rf ./dist"
"clean": "rm -rf ./dist",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "README.md", "CHANGELOG.md"],
"publishConfig": {
packages/react-math/package.json
+2 -1
View File
@@ -30,7 +30,8 @@
"build": "tsdown",
"typecheck": "tsc --noEmit",
"dev": "bun run build -- --watch ./src",
"clean": "rm -rf ./dist"
"clean": "rm -rf ./dist",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"bin": {
"gitbook-math": "./bin/gitbook-math.js"
packages/react-openapi/package.json
+2 -1
View File
@@ -50,7 +50,8 @@
"typecheck": "tsc --noEmit",
"unit": "bun test",
"dev": "bun run build -- --watch ./src",
"clean": "rm -rf ./dist"
"clean": "rm -rf ./dist",
"publish-to-npm": "../../scripts/publish-if-new.sh"
},
"files": ["dist", "README.md", "CHANGELOG.md"],
"publishConfig": {
scripts/publish-if-new.sh
Executable
+16
View File
@@ -0,0 +1,16 @@
#!/usr/bin/env bash
set -euo pipefail
NAME=$(node -p "require('./package.json').name")
VERSION=$(node -p "require('./package.json').version")
if npm view "${NAME}@${VERSION}" >/dev/null 2>&1; then
echo "${NAME}@${VERSION} already published, skipping."
exit 0
fi
TARBALL=$(bun pm pack --quiet --dirname ./.publish)
npm publish "${TARBALL}" --no-workspaces
turbo.json
+4 -4
View File
@@ -53,10 +53,10 @@
"cache": false,
"dependsOn": ["generate", "^build"]
},
// Script run when the package is deployed
"release": {
"dependsOn": ["^release", "build"],
"env": ["CLOUDFLARE_ACCOUNT_ID", "CLOUDFLARE_API_TOKEN"]
// Publish the package to npm
"publish-to-npm": {
"dependsOn": ["build"],
"cache": false
},
// Clean up the package
"clean": {