Skip to content

Update GHA publishing steps #163

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 3 commits into from
Closed

Conversation

michaelyeager-wf
Copy link
Contributor

Which problem is this PR solving?

This PR updates the GHA publish steps to allow publishing this package to be automated.

Checklist:

  • Unit tests have been added
  • Documentation has been updated

@michaelyeager-wf
Copy link
Contributor Author

michaelyeager-wf commented Apr 9, 2024

@aviary2-wf
Copy link

Security Insights

No security relevant content was detected by automated scans.

Action Items

  • Review PR for security impact; comment "security review required" if needed or unsure
  • Verify aviary.yaml coverage of security relevant code

Questions or Comments? Reach out on Slack: #support-infosec.

nickshoust-wf
nickshoust-wf previously approved these changes Apr 9, 2024
Copy link
Member

@nickshoust-wf nickshoust-wf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me based and worked for the other repo

Im not sure if there's a way to test this prior to tag - so lets see how it goes!

Check here for latest version getting pushed from the action
https://pub.dev/packages/opentelemetry

keruitan-wk
keruitan-wk previously approved these changes Apr 9, 2024
@michaelyeager-wf
Copy link
Contributor Author

@Workiva/release-management-p

@michaelyeager-wf
Copy link
Contributor Author

Added steps tested working in another repo. We cannot test here without pushing, and cannot do so before merge.

QA +1

permissions:
id-token: write # Required for authentication using OIDC
uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1
name: Publish to pub.dev

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there any reason here that we aren't using the supplied action? We just need to enable the package to run automated publishes and it should be good to go?

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We just need to enable the package to run automated publishes and it should be good to go?

We've made the pub-side configuration updates as-described, but using the shared workflow from the linked documentation has resulted in the following in the past:

dart-lang/setup-dart/.github/workflows/publish.yml@v1 is not allowed to be used in Workiva/opentelemetry-dart. 
Reusable workflows in this workflow must be: 
within a repository that belongs to your Enterprise account or matching the following: 
dart-lang/setup-dart@*, peter-evans/create-pull-request@*, denoland/setup-deno@*, romeovs/lcov-reporter-action@*, dorny/test-reporter@refs/tags/v1.6.0, dorny/test-reporter@e9fa2f582c0ebbe2e263fd18fad744d52e0b0203, maxim-lobanov/setup-xcode@9a697e2b393340c3cacd97468baa318e4c883d98, pypa/gh-action-pypi-publish@*, subosito/flutter-action@*, coursier/setup-action@*, browser-actions/setup-chrome@*, mikepenz/action-junit-report@150e2f992e4fad1379da2056d1d1c279f520e058, invertase/github-action-dart-analyzer@1cda5922c6369263b1c7e2fbe281f69704f4d63e, golangci/golangci-lint-action@639cd343e1d3b897ff35927a75193d57cfcba299, mikefarah/yq-portable-yaml-processor@845d4ae38915c31cc76ab968393657cceaec60fc, Workiva/gha-integration-testing@26fa4acd141cb143661af9e...

as here: https://github.com/Workiva/opentelemetry-dart/actions/runs/6828348643

@michaelyeager-wf
Copy link
Contributor Author

Closing to open a fresh PR for compliance with audit tooling.

@michaelyeager-wf michaelyeager-wf mentioned this pull request Apr 11, 2024
2 tasks
@rmconsole2-wf rmconsole2-wf deleted the myeager-wf/gha-publish branch April 11, 2024 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants