mirror of
https://github.com/KeygraphHQ/shannon.git
synced 2026-06-10 01:13:57 +02:00
ezl-keygraph
147bc3f5f4
* fix: patch smol-toml and tsdown vulnerabilities Update smol-toml 1.6.0→1.6.1 (DoS via recursive comment parsing) and tsdown 0.21.2→0.21.5 (picomatch ReDoS + method injection). * fix: pin all unpinned dependency versions in Dockerfile Pins subfinder v2.13.0, WhatWeb v0.6.3 (switched from git clone to release tarball), schemathesis 4.13.0, addressable 2.8.9, claude-code 2.1.84, and playwright-cli 0.1.1 for reproducible builds. * fix: pin GitHub Actions to commit SHAs for supply chain security * fix: pin GitHub Actions to commit SHAs in beta and rollback workflows
72 lines
2.0 KiB
YAML
72 lines
2.0 KiB
YAML
name: Rollback (Beta)
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
version:
|
|
description: "Beta version to roll back to (example: 1.0.0-beta.2)"
|
|
required: true
|
|
type: string
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: rollback-beta-${{ github.event.inputs.version }}
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
rollback:
|
|
name: Roll back npm beta dist-tag
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Validate target version
|
|
id: target
|
|
shell: bash
|
|
env:
|
|
RAW_VERSION: ${{ inputs.version }}
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
VERSION="${RAW_VERSION#v}"
|
|
|
|
if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+-beta\.[0-9]+$ ]]; then
|
|
echo "Version must be in format X.Y.Z-beta.N (e.g. 1.0.0-beta.2)"
|
|
exit 1
|
|
fi
|
|
|
|
echo "version=$VERSION" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
|
|
with:
|
|
node-version: 24
|
|
registry-url: https://registry.npmjs.org
|
|
|
|
- name: Verify npm package version exists
|
|
run: npm view "@keygraph/shannon@${{ steps.target.outputs.version }}" version
|
|
|
|
- name: Show current npm dist-tags
|
|
env:
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
run: npm dist-tag ls @keygraph/shannon
|
|
|
|
- name: Move npm beta tag
|
|
env:
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
run: npm dist-tag add "@keygraph/shannon@${{ steps.target.outputs.version }}" beta
|
|
|
|
- name: Show final npm dist-tags
|
|
env:
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
run: npm dist-tag ls @keygraph/shannon
|
|
|
|
- name: Write summary
|
|
run: |
|
|
{
|
|
echo "## Rollback beta"
|
|
echo ""
|
|
echo "- Target version: \`${{ steps.target.outputs.version }}\`"
|
|
echo "- npm package: \`@keygraph/shannon\` (beta tag moved)"
|
|
} >> "$GITHUB_STEP_SUMMARY"
|