mirror of
https://github.com/affaan-m/everything-claude-code.git
synced 2026-03-30 21:53:28 +08:00
46f37ae4fb
Pin all GitHub Actions to commit SHAs instead of mutable version tags across ci.yml, release.yml, maintenance.yml, and all reusable workflows. This prevents supply-chain attacks via tag hijacking. Add the required Skills section to CLAUDE.md mapping project files (README.md, .github/workflows/*.yml) to their respective review skills.
70 lines
2.1 KiB
YAML
70 lines
2.1 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
tags: ['v*']
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
release:
|
|
name: Create Release
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Validate version tag
|
|
run: |
|
|
if ! [[ "${REF_NAME}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
|
echo "Invalid version tag format. Expected vX.Y.Z"
|
|
exit 1
|
|
fi
|
|
|
|
env:
|
|
REF_NAME: ${{ github.ref_name }}
|
|
- name: Verify plugin.json version matches tag
|
|
env:
|
|
TAG_NAME: ${{ github.ref_name }}
|
|
run: |
|
|
TAG_VERSION="${TAG_NAME#v}"
|
|
PLUGIN_VERSION=$(grep -oE '"version": *"[^"]*"' .claude-plugin/plugin.json | grep -oE '[0-9]+\.[0-9]+\.[0-9]+')
|
|
if [ "$TAG_VERSION" != "$PLUGIN_VERSION" ]; then
|
|
echo "::error::Tag version ($TAG_VERSION) does not match plugin.json version ($PLUGIN_VERSION)"
|
|
echo "Run: ./scripts/release.sh $TAG_VERSION"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Generate release highlights
|
|
id: highlights
|
|
env:
|
|
TAG_NAME: ${{ github.ref_name }}
|
|
run: |
|
|
TAG_VERSION="${TAG_NAME#v}"
|
|
cat > release_body.md <<EOF
|
|
## ECC ${TAG_VERSION}
|
|
|
|
### What This Release Focuses On
|
|
- Harness reliability and hook stability across Claude Code, Cursor, OpenCode, and Codex
|
|
- Stronger eval-driven workflows and quality gates
|
|
- Better operator UX for autonomous loop execution
|
|
|
|
### Notable Changes
|
|
- Session persistence and hook lifecycle fixes
|
|
- Expanded skills and command coverage for harness performance work
|
|
- Improved release-note generation and changelog hygiene
|
|
|
|
### Notes
|
|
- For migration tips and compatibility notes, see README and CHANGELOG.
|
|
EOF
|
|
|
|
- name: Create GitHub Release
|
|
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2
|
|
with:
|
|
body_path: release_body.md
|
|
generate_release_notes: true
|