ci: pin idempotent package publish template#7
Conversation
Greptile SummaryThis PR updates the pinned commit SHA for the shared Confidence Score: 5/5Safe to merge — minimal, targeted SHA bump with no logic changes. The change is a single-line SHA update to a pinned reusable workflow, aligned with the stated goal of idempotent publishing. No logic, secrets, or inputs are altered, and a proof run is referenced in the PR description. No files require special attention. Important Files Changed
Sequence DiagramsequenceDiagram
participant GH as GitHub (release / workflow_dispatch)
participant PW as publish.yml (this repo)
participant CT as ci-templates js-bazel-package.yml@f23f67b0
participant NPM as npmjs
participant GHPKG as GitHub Packages
GH->>PW: Trigger (published release or manual dispatch)
PW->>CT: Call reusable workflow (idempotent publish template)
CT->>CT: Build, typecheck, test (pnpm)
CT->>NPM: Publish (skip if version already exists)
CT->>GHPKG: Publish (skip if version already exists)
CT-->>PW: Success (idempotent — no failure on duplicate version)
Reviews (1): Last reviewed commit: "ci: pin idempotent package publish templ..." | Re-trigger Greptile |
Pins the shared js-bazel-package workflow to the TIN-713 idempotent publish template.
This keeps existing package publishes from failing when npmjs or GitHub Packages already has the same version.
Proof run: tinyland-inc/tinyland-stores/actions/runs/25092503866.