Skip to content

ci: make nuget.org publish dispatch-only and block 3.10.x #274

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sfmskywalker merged 2 commits into from
Oct 3, 2026
Merged

ci: make nuget.org publish dispatch-only and block 3.10.x #274

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
201d7b2
ci: make nuget.org publish dispatch-only and block 3.10.x
cursoragent Oct 3, 2026
7bfefe5
ci: document that publish_nuget is inert on 3.10.x main
cursoragent Oct 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 23 additions & 3 deletions .github/workflows/packages.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,16 @@
name: Packages
on:
workflow_dispatch:
inputs:
# Does nothing on main while base_version is 3.10.x. Dispatch VERSION is
# always ${base_version}-${prefix}.${run_number}, so the nuget.org job's
# !startsWith(..., '3.10.') gate never opens. Publishing 3.10 publicly
# later means deliberately removing that check and deciding how a dispatch
# run sets VERSION.
publish_nuget:
description: 'Publish packages to nuget.org (never for 3.10.x)'
type: boolean
default: false
push:
branches:
- 'main'
Expand All @@ -26,6 +36,8 @@ jobs:
name: Build packages
runs-on: ubuntu-latest
timeout-minutes: 30
outputs:
version: ${{ steps.set_version.outputs.version }}
steps:
- name: Extract branch name
run: |
Expand Down Expand Up @@ -56,13 +68,17 @@ jobs:
git branch --remote --contains | grep origin/${BRANCH_NAME}
fi
- name: Set VERSION variable
id: set_version
run: |
if [[ "${{ github.ref }}" == refs/tags/* && "${{ github.event_name }}" == "release" && ("${{ github.event.action }}" == "published" || "${{ github.event.action }}" == "prereleased") ]]; then
TAG_NAME=${{ github.ref }} # e.g., refs/tags/3.0.0
TAG_NAME=${TAG_NAME#refs/tags/} # remove the refs/tags/ prefix
echo "VERSION=${TAG_NAME}" >> $GITHUB_ENV
echo "version=${TAG_NAME}" >> $GITHUB_OUTPUT
else
echo "VERSION=${{env.base_version}}-${PACKAGE_PREFIX}.${{github.run_number}}" >> $GITHUB_ENV
VERSION="${{env.base_version}}-${PACKAGE_PREFIX}.${{github.run_number}}"
echo "VERSION=${VERSION}" >> $GITHUB_ENV
echo "version=${VERSION}" >> $GITHUB_OUTPUT
fi
- uses: actions/setup-dotnet@v5
with:
Expand All @@ -77,7 +93,7 @@ jobs:
with:
name: elsa-nuget-packages
path: packages/*nupkg
if: ${{ github.event_name == 'release' || github.event_name == 'push'}}
if: ${{ github.event_name == 'release' || github.event_name == 'push' || github.event_name == 'workflow_dispatch'}}

publish_preview_feedz:
name: Publish to feedz.io
Expand All @@ -99,7 +115,11 @@ jobs:
needs: build
runs-on: ubuntu-latest
timeout-minutes: 20
if: ${{ github.event_name == 'release' && github.event.action == 'published' }}
# Dispatch-only. 3.10.x (including 3.10.0-preview.*) must never reach nuget.org.
# publish_nuget does nothing on main while base_version is 3.10.x. Publishing
# 3.10 publicly later means deliberately removing the 3.10. check and deciding
# how a dispatch run sets VERSION (always base_version-prefix.run_number).
if: ${{ github.event_name == 'workflow_dispatch' && inputs.publish_nuget && !startsWith(needs.build.outputs.version, '3.10.') }}
permissions:
# Required to request the OIDC token that nuget.org exchanges for a short-lived API key (Trusted Publishing).
id-token: write
Expand Down
Loading