From 96d2af98d9f9953b8387b16142e88dbd477d118a Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Thu, 3 Sep 2026 13:23:51 +0530 Subject: [PATCH 1/7] Update and rename release-production-plugins.yml to release.yml --- .../workflows/release-production-plugins.yml | 205 ------------------ .github/workflows/release.yml | 96 ++++++++ 2 files changed, 96 insertions(+), 205 deletions(-) delete mode 100644 .github/workflows/release-production-plugins.yml create mode 100644 .github/workflows/release.yml diff --git a/.github/workflows/release-production-plugins.yml b/.github/workflows/release-production-plugins.yml deleted file mode 100644 index 5756ef9f2..000000000 --- a/.github/workflows/release-production-plugins.yml +++ /dev/null @@ -1,205 +0,0 @@ -name: Release CLI Plugins (Production) - -on: - push: - branches: [main] - workflow_dispatch: - -jobs: - build: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@v4 - with: - version: 10.28.0 - - uses: actions/setup-node@v4 - with: - node-version: '22.x' - - - name: Enable Corepack - run: corepack enable - - - name: Install pnpm - run: corepack prepare pnpm@10.28.0 --activate - - - name: Clean the repository - run: pnpm run clean:all - - - name: Install root dependencies - run: pnpm install --no-frozen-lockfile - - - name: Build all plugins - run: pnpm -r --sort run build - - - name: Reading Configuration - id: release_config - uses: rgarcia-phi/json-to-variables@v1.1.0 - with: - filename: .github/config/release.json - prefix: release - - # Asset Management - - name: Publishing asset-management (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-asset-management/package.json - access: public - tag: latest - - # Variants - - name: Publishing variants (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-variants/package.json - tag: latest - - # Export - - name: Publishing export (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-export/package.json - tag: latest - - # Audit - - name: Publishing audit (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-audit/package.json - tag: latest - - # Import - - name: Publishing import (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-import/package.json - tag: latest - - # Clone - - name: Publishing clone (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-clone/package.json - tag: latest - - # Import Setup - - name: Publishing import-setup (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-import-setup/package.json - tag: latest - - # Export to CSV - - name: Publishing export-to-csv (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-export-to-csv/package.json - tag: latest - - # Migration - - name: Publishing migration (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-migration/package.json - tag: latest - - # Migrate RTE - - name: Publishing migrate-rte (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-migrate-rte/package.json - access: public - tag: latest - - # Seed - - name: Publishing seed (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-seed/package.json - tag: latest - - # Bootstrap - - name: Publishing bootstrap (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-bootstrap/package.json - tag: latest - - # Branches - - name: Publishing branches (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-branches/package.json - tag: latest - - # Apps CLI - - name: Publishing apps-cli (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-apps-cli/package.json - tag: latest - - # Query Export - - name: Publishing query-export (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-query-export/package.json - tag: latest - - # Content Type - - name: Publishing content-type (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-content-type/package.json - tag: latest - - # Regex Validate - - name: Publishing regex-validate (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-cli-cm-regex-validate/package.json - access: public - tag: latest - - # Tsgen - - name: Publishing tsgen (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-cli-tsgen/package.json - tag: latest - - # External Migrate - - name: Publishing external-migrate (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-external-migrate/package.json - access: public - tag: latest - - # Bulk Operations - - name: Publishing bulk-operations (Production) - uses: JS-DevTools/npm-publish@v3 - with: - token: ${{ secrets.NPM_TOKEN }} - package: ./packages/contentstack-bulk-operations/package.json - access: public - tag: latest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml new file mode 100644 index 000000000..8609194f1 --- /dev/null +++ b/.github/workflows/release.yml @@ -0,0 +1,96 @@ +name: Publish to npmjs registry +on: + release: + types: [published] +jobs: + build: + runs-on: ubuntu-latest + permissions: + contents: read + id-token: write # required so GitHub can mint the OIDC token for npm trusted publishing + steps: + - uses: actions/checkout@v4 + with: + ref: ${{ github.event.release.tag_name }} + persist-credentials: false + - uses: pnpm/action-setup@v4 + with: + version: 10.28.0 + - uses: actions/setup-node@v4 + with: + node-version: '22.x' + registry-url: https://registry.npmjs.org/ + - name: Enable Corepack + run: corepack enable + - name: Install pnpm + run: corepack prepare pnpm@10.28.0 --activate + - name: Clean the repository + run: pnpm run clean:all + - name: Install root dependencies + run: pnpm install --no-frozen-lockfile + - name: Build all plugins + run: pnpm -r --sort run build + # OIDC trusted publishing requires npm CLI >= 11.5.1; bump it explicitly + # since Node 22's bundled npm version may lag behind that. + - name: Update npm + run: npm install -g npm@latest + # Asset Management + - name: Publishing asset-management (Production) + run: npm publish ./packages/contentstack-asset-management --access public --tag latest + # Variants + - name: Publishing variants (Production) + run: npm publish ./packages/contentstack-variants --tag latest + # Export + - name: Publishing export (Production) + run: npm publish ./packages/contentstack-export --tag latest + # Audit + - name: Publishing audit (Production) + run: npm publish ./packages/contentstack-audit --tag latest + # Import + - name: Publishing import (Production) + run: npm publish ./packages/contentstack-import --tag latest + # Clone + - name: Publishing clone (Production) + run: npm publish ./packages/contentstack-clone --tag latest + # Import Setup + - name: Publishing import-setup (Production) + run: npm publish ./packages/contentstack-import-setup --tag latest + # Export to CSV + - name: Publishing export-to-csv (Production) + run: npm publish ./packages/contentstack-export-to-csv --tag latest + # Migration + - name: Publishing migration (Production) + run: npm publish ./packages/contentstack-migration --tag latest + # Migrate RTE + - name: Publishing migrate-rte (Production) + run: npm publish ./packages/contentstack-migrate-rte --access public --tag latest + # Seed + - name: Publishing seed (Production) + run: npm publish ./packages/contentstack-seed --tag latest + # Bootstrap + - name: Publishing bootstrap (Production) + run: npm publish ./packages/contentstack-bootstrap --tag latest + # Branches + - name: Publishing branches (Production) + run: npm publish ./packages/contentstack-branches --tag latest + # Apps CLI + - name: Publishing apps-cli (Production) + run: npm publish ./packages/contentstack-apps-cli --tag latest + # Query Export + - name: Publishing query-export (Production) + run: npm publish ./packages/contentstack-query-export --tag latest + # Content Type + - name: Publishing content-type (Production) + run: npm publish ./packages/contentstack-content-type --tag latest + # Regex Validate + - name: Publishing regex-validate (Production) + run: npm publish ./packages/contentstack-cli-cm-regex-validate --access public --tag latest + # Tsgen + - name: Publishing tsgen (Production) + run: npm publish ./packages/contentstack-cli-tsgen --tag latest + # External Migrate + - name: Publishing external-migrate (Production) + run: npm publish ./packages/contentstack-external-migrate --access public --tag latest + # Bulk Operations + - name: Publishing bulk-operations (Production) + run: npm publish ./packages/contentstack-bulk-operations --access public --tag latest From 323a8956e4a9da0dd910acab2fce50b70cb90f32 Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Thu, 3 Sep 2026 13:24:35 +0530 Subject: [PATCH 2/7] Update CODEOWNERS for workflow and new file --- .github/CODEOWNERS | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 38cb05cd7..4e1d7b232 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,5 +1,4 @@ * @contentstack/devex-pr-reviewers -.github/workflows/sca-scan.yml @contentstack/security-admin -.github/workflows/issues-jira.yml @contentstack/security-admin -.github/workflows/policy-scan.yml @contentstack/security-admin +.github/workflows/ @contentstack/security-admin **/.snyk @contentstack/security-admin +**/CODEOWNERS @contentstack/security-admin From 3bb0115aa47769bb4df2e51a351aeedf3a56005c Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Tue, 8 Sep 2026 18:17:43 +0530 Subject: [PATCH 3/7] Updated codeowners --- CODEOWNERS | 11 ++--------- 1 file changed, 2 insertions(+), 9 deletions(-) diff --git a/CODEOWNERS b/CODEOWNERS index 0496bc6ae..7d3f09c4b 100644 --- a/CODEOWNERS +++ b/CODEOWNERS @@ -1,11 +1,4 @@ * @contentstack/devex-pr-reviewers - -.github/workflows/sca-scan.yml @contentstack/security-admin - -.github/workflows/codeql-anaylsis.yml @contentstack/security-admin - +.github/workflows/ @contentstack/security-admin **/.snyk @contentstack/security-admin - -.github/workflows/policy-scan.yml @contentstack/security-admin - -.github/workflows/issues-jira.yml @contentstack/security-admin +**/CODEOWNERS @contentstack/security-admin \ No newline at end of file From af9b4b886b42ee43f85ee6e9a4e5103e17ad9c2d Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Tue, 8 Sep 2026 18:17:45 +0530 Subject: [PATCH 4/7] Updated codeowners --- .github/CODEOWNERS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 4e1d7b232..7d3f09c4b 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,4 +1,4 @@ * @contentstack/devex-pr-reviewers .github/workflows/ @contentstack/security-admin **/.snyk @contentstack/security-admin -**/CODEOWNERS @contentstack/security-admin +**/CODEOWNERS @contentstack/security-admin \ No newline at end of file From 5f64d5de3f8873c5b76ad7b3a977792c778d4674 Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Thu, 10 Sep 2026 08:27:02 +0530 Subject: [PATCH 5/7] Updated codeowners --- CODEOWNERS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CODEOWNERS b/CODEOWNERS index 7d3f09c4b..ac7dad02f 100644 --- a/CODEOWNERS +++ b/CODEOWNERS @@ -1,4 +1,4 @@ -* @contentstack/devex-pr-reviewers +* @contentstack/developer-ecosystem-pr-reviewers .github/workflows/ @contentstack/security-admin **/.snyk @contentstack/security-admin **/CODEOWNERS @contentstack/security-admin \ No newline at end of file From c5a9630550cb58b25b553c5b8a668dbc27916b9e Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Thu, 10 Sep 2026 08:27:04 +0530 Subject: [PATCH 6/7] Updated codeowners --- .github/CODEOWNERS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 7d3f09c4b..ac7dad02f 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,4 +1,4 @@ -* @contentstack/devex-pr-reviewers +* @contentstack/developer-ecosystem-pr-reviewers .github/workflows/ @contentstack/security-admin **/.snyk @contentstack/security-admin **/CODEOWNERS @contentstack/security-admin \ No newline at end of file From cb230c400d598bf027d309fa686874d91d3b7e1f Mon Sep 17 00:00:00 2001 From: raj pandey Date: Tue, 15 Sep 2026 14:16:59 +0530 Subject: [PATCH 7/7] Revert Release to old flow --- .../workflows/release-production-plugins.yml | 205 ++++++++++++++++++ .github/workflows/release.yml | 96 -------- 2 files changed, 205 insertions(+), 96 deletions(-) create mode 100644 .github/workflows/release-production-plugins.yml delete mode 100644 .github/workflows/release.yml diff --git a/.github/workflows/release-production-plugins.yml b/.github/workflows/release-production-plugins.yml new file mode 100644 index 000000000..fe2434c8b --- /dev/null +++ b/.github/workflows/release-production-plugins.yml @@ -0,0 +1,205 @@ +name: Release CLI Plugins (Production) + +on: + push: + branches: [main] + workflow_dispatch: + +jobs: + build: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - uses: pnpm/action-setup@v4 + with: + version: 10.28.0 + - uses: actions/setup-node@v4 + with: + node-version: '22.x' + + - name: Enable Corepack + run: corepack enable + + - name: Install pnpm + run: corepack prepare pnpm@10.28.0 --activate + + - name: Clean the repository + run: pnpm run clean:all + + - name: Install root dependencies + run: pnpm install --no-frozen-lockfile + + - name: Build all plugins + run: pnpm -r --sort run build + + - name: Reading Configuration + id: release_config + uses: rgarcia-phi/json-to-variables@v1.1.0 + with: + filename: .github/config/release.json + prefix: release + + # Asset Management + - name: Publishing asset-management (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-asset-management/package.json + access: public + tag: latest + + # Variants + - name: Publishing variants (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-variants/package.json + tag: latest + + # Export + - name: Publishing export (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-export/package.json + tag: latest + + # Audit + - name: Publishing audit (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-audit/package.json + tag: latest + + # Import + - name: Publishing import (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-import/package.json + tag: latest + + # Clone + - name: Publishing clone (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-clone/package.json + tag: latest + + # Import Setup + - name: Publishing import-setup (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-import-setup/package.json + tag: latest + + # Export to CSV + - name: Publishing export-to-csv (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-export-to-csv/package.json + tag: latest + + # Migration + - name: Publishing migration (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-migration/package.json + tag: latest + + # Migrate RTE + - name: Publishing migrate-rte (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-migrate-rte/package.json + access: public + tag: latest + + # Seed + - name: Publishing seed (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-seed/package.json + tag: latest + + # Bootstrap + - name: Publishing bootstrap (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-bootstrap/package.json + tag: latest + + # Branches + - name: Publishing branches (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-branches/package.json + tag: latest + + # Apps CLI + - name: Publishing apps-cli (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-apps-cli/package.json + tag: latest + + # Query Export + - name: Publishing query-export (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-query-export/package.json + tag: latest + + # Content Type + - name: Publishing content-type (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-content-type/package.json + tag: latest + + # Regex Validate + - name: Publishing regex-validate (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-cli-cm-regex-validate/package.json + access: public + tag: latest + + # Tsgen + - name: Publishing tsgen (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-cli-tsgen/package.json + tag: latest + + # External Migrate + - name: Publishing external-migrate (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-external-migrate/package.json + access: public + tag: latest + + # Bulk Operations + - name: Publishing bulk-operations (Production) + uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NPM_TOKEN }} + package: ./packages/contentstack-bulk-operations/package.json + access: public + tag: latest \ No newline at end of file diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml deleted file mode 100644 index 8609194f1..000000000 --- a/.github/workflows/release.yml +++ /dev/null @@ -1,96 +0,0 @@ -name: Publish to npmjs registry -on: - release: - types: [published] -jobs: - build: - runs-on: ubuntu-latest - permissions: - contents: read - id-token: write # required so GitHub can mint the OIDC token for npm trusted publishing - steps: - - uses: actions/checkout@v4 - with: - ref: ${{ github.event.release.tag_name }} - persist-credentials: false - - uses: pnpm/action-setup@v4 - with: - version: 10.28.0 - - uses: actions/setup-node@v4 - with: - node-version: '22.x' - registry-url: https://registry.npmjs.org/ - - name: Enable Corepack - run: corepack enable - - name: Install pnpm - run: corepack prepare pnpm@10.28.0 --activate - - name: Clean the repository - run: pnpm run clean:all - - name: Install root dependencies - run: pnpm install --no-frozen-lockfile - - name: Build all plugins - run: pnpm -r --sort run build - # OIDC trusted publishing requires npm CLI >= 11.5.1; bump it explicitly - # since Node 22's bundled npm version may lag behind that. - - name: Update npm - run: npm install -g npm@latest - # Asset Management - - name: Publishing asset-management (Production) - run: npm publish ./packages/contentstack-asset-management --access public --tag latest - # Variants - - name: Publishing variants (Production) - run: npm publish ./packages/contentstack-variants --tag latest - # Export - - name: Publishing export (Production) - run: npm publish ./packages/contentstack-export --tag latest - # Audit - - name: Publishing audit (Production) - run: npm publish ./packages/contentstack-audit --tag latest - # Import - - name: Publishing import (Production) - run: npm publish ./packages/contentstack-import --tag latest - # Clone - - name: Publishing clone (Production) - run: npm publish ./packages/contentstack-clone --tag latest - # Import Setup - - name: Publishing import-setup (Production) - run: npm publish ./packages/contentstack-import-setup --tag latest - # Export to CSV - - name: Publishing export-to-csv (Production) - run: npm publish ./packages/contentstack-export-to-csv --tag latest - # Migration - - name: Publishing migration (Production) - run: npm publish ./packages/contentstack-migration --tag latest - # Migrate RTE - - name: Publishing migrate-rte (Production) - run: npm publish ./packages/contentstack-migrate-rte --access public --tag latest - # Seed - - name: Publishing seed (Production) - run: npm publish ./packages/contentstack-seed --tag latest - # Bootstrap - - name: Publishing bootstrap (Production) - run: npm publish ./packages/contentstack-bootstrap --tag latest - # Branches - - name: Publishing branches (Production) - run: npm publish ./packages/contentstack-branches --tag latest - # Apps CLI - - name: Publishing apps-cli (Production) - run: npm publish ./packages/contentstack-apps-cli --tag latest - # Query Export - - name: Publishing query-export (Production) - run: npm publish ./packages/contentstack-query-export --tag latest - # Content Type - - name: Publishing content-type (Production) - run: npm publish ./packages/contentstack-content-type --tag latest - # Regex Validate - - name: Publishing regex-validate (Production) - run: npm publish ./packages/contentstack-cli-cm-regex-validate --access public --tag latest - # Tsgen - - name: Publishing tsgen (Production) - run: npm publish ./packages/contentstack-cli-tsgen --tag latest - # External Migrate - - name: Publishing external-migrate (Production) - run: npm publish ./packages/contentstack-external-migrate --access public --tag latest - # Bulk Operations - - name: Publishing bulk-operations (Production) - run: npm publish ./packages/contentstack-bulk-operations --access public --tag latest