Skip to content

fix(ci): GitHub Packages 任务的冒烟输入改从检出目录读取 #26

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
supermax92 merged 1 commit into from
Oct 11, 2026
Merged

fix(ci): GitHub Packages 任务的冒烟输入改从检出目录读取 #26

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/publish-github-npm.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,8 +49,8 @@ jobs:
run: |
npm install --prefix verified --ignore-scripts --no-audit --no-fund --package-lock=false "./publish/supermax92-qgraphflow-$VERSION.tgz"
diff -r runtime verified/node_modules/@supermax92/qgraphflow
node verified/node_modules/@supermax92/qgraphflow/skills/q-flow/scripts/validate-graph.mjs verified/node_modules/@supermax92/qgraphflow/examples/jeepay/flowchart.graph.json --input-only
node verified/node_modules/@supermax92/qgraphflow/skills/q-flow/scripts/generate-viewer.mjs verified/node_modules/@supermax92/qgraphflow/examples/jeepay/flowchart.graph.json output/order
node verified/node_modules/@supermax92/qgraphflow/skills/q-flow/scripts/validate-graph.mjs examples/jeepay/flowchart.graph.json --input-only
node verified/node_modules/@supermax92/qgraphflow/skills/q-flow/scripts/generate-viewer.mjs examples/jeepay/flowchart.graph.json output/order
# Generate the complete real-source Jeepay collection with the installed package.
node verified/node_modules/@supermax92/qgraphflow/skills/q-flow/scripts/generate-viewer.mjs examples/jeepay/collection.graph.json output/eleven
- uses: actions/setup-node@v7
Expand All @@ -71,7 +71,7 @@ jobs:
cmp "publish/supermax92-qgraphflow-$VERSION.tgz" "downloaded/supermax92-qgraphflow-$VERSION.tgz"
npm install --prefix registry-check --registry=https://npm.pkg.github.com --ignore-scripts --no-audit --no-fund --package-lock=false "@supermax92/qgraphflow@$VERSION"
diff -r runtime registry-check/node_modules/@supermax92/qgraphflow
node registry-check/node_modules/@supermax92/qgraphflow/skills/q-flow/scripts/generate-viewer.mjs registry-check/node_modules/@supermax92/qgraphflow/examples/jeepay/flowchart.graph.json output/registry
node registry-check/node_modules/@supermax92/qgraphflow/skills/q-flow/scripts/generate-viewer.mjs examples/jeepay/flowchart.graph.json output/registry

# npmjs.com: the Release tarball itself, published through npm trusted publishing (GitHub OIDC) with provenance.
# No npm token is stored anywhere; npmjs.com trusts this repository and this workflow file name.
Expand Down
1 change: 1 addition & 0 deletions tests/plugin-package.test.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,7 @@ test('the npmjs job publishes the verified Release tarball through trusted publi
const away = job.indexOf('cd "$RUNNER_TEMP/npx"'), npx = job.indexOf('npx -y "qgraphflow@$VERSION"');
assert.ok(away > 0 && away < npx, 'npx runs outside the checkout, whose own package.json would shadow the registry package');
assert.doesNotMatch(workflow, /NPM_TOKEN|secrets\./, 'No stored npm token');
assert.doesNotMatch(workflow, /qgraphflow\/examples\//, 'Examples are not packaged; read them from the checkout');
assert.doesNotMatch(job, /NODE_AUTH_TOKEN|packages: write/);
assert.ok(fs.existsSync(path.join(root, 'examples/jeepay/flowchart.graph.json')));
});
Expand Down
Loading