Skip to content

Conversation

@Strum355
Copy link
Member

Description

Based on the graph here: https://github.com/orgs/community/discussions/174507#discussioncomment-14723818

Changes:

  • Separate publish-release.yml & publish-prerelease.yml workflows that are called by a publish-switch.yml workflow which is our "trusted publisher"
    • This is due to the following reason: Some GitHub Actions workflows use workflow_call to invoke other workflows that run npm publish, or use workflow_dispatch for manual publishing. When this happens, validation checks the calling workflow's name instead of the workflow that actually contains the publish command, which can cause configuration mismatches. outlined here: https://docs.npmjs.com/trusted-publishers
  • stage.yml now calls publish-switch.yml indicating its a "prerelease" version
  • release.yml now calls publish-switch.yml indicating a prod release version

Checklist

  • I have followed this repository's contributing guidelines.
  • I will adhere to the project's code of conduct.

Additional information

Anything else?

@Strum355 Strum355 requested a review from ruromero November 14, 2025 16:05
@Strum355 Strum355 enabled auto-merge (squash) November 14, 2025 16:05
@Strum355 Strum355 merged commit e0f6df3 into guacsec:main Nov 14, 2025
41 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants