Skip to content

Conversation

@james-snyk
Copy link
Contributor

  • Tests written and linted ℹ︎
  • Documentation written ℹ︎
  • Commit history is tidy ℹ︎

What this does

tag the repo after merging.
The version is bumped based on the prefix in the PR title.
fix bumps the patch version, feat bumps the minor version and major bumps the major version.

@james-snyk james-snyk requested review from a team as code owners November 21, 2025 12:38
@snyk-io
Copy link

snyk-io bot commented Nov 21, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions
Copy link

github-actions bot commented Nov 21, 2025

Valid — 🟢 PATCH

@james-snyk james-snyk changed the title ci: tag and release feat: tag and release Nov 21, 2025
@james-snyk james-snyk changed the title feat: tag and release major: tag and release Nov 21, 2025
@james-snyk james-snyk changed the title major: tag and release fix: tag and release Nov 21, 2025
else
echo "Warning: No recognized commit type, defaulting to PATCH"
BUMP_TYPE="patch"
PATCH=$((PATCH + 1))

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why not default to none; at least it makes it explicit when a PR requests a version bump?
Or if the repo requires conventional commits you could even reject the PR in this default branch.

echo "PR title: $PR_TITLE"

# Determine version bump based on PR title
if [[ "$PR_TITLE" =~ ^\[major\]|^major: ]]; then
Copy link

@nico-incubiq nico-incubiq Nov 21, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

conventional commits also define BREAKING CHANGE and just appending a ! to whatever the type of change, eg fix(api)!: ..., which would be nice to support here.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Indeed. although the ! doesn't work for most of our repos.

- checkout
- add_ssh_keys:
fingerprints:
- "SHA256:w5lYpE8DMWxUdasN8yMbbFdiz6s50PPBJMkV0a1iyZ8"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what's this?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, looks secrety. This is something that should probably be read from elsewhere

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

its the sha of the deploy key id in circleci. it tells circleci what key to use when tagging the repo. The id is public so its safe to have this in the config.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants