build: pin framework with temporary marketplace isolation (#18) #12

	name: Publish Agent Bundle

	on:
	push:
	branches: [main]
	workflow_dispatch:

	permissions:
	contents: write

	concurrency:
	group: publish-agent-bundle
	cancel-in-progress: true

	jobs:
	publish:
	if: github.ref == 'refs/heads/main'
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- name: Check out repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

	- name: Set up Node.js
	uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
	with:
	node-version: "24"
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Build and verify artifact
	run: npm run check

	- name: Commit generated artifact on main
	run: \|
	git config user.name github-actions[bot]
	git config user.email 41898282+github-actions[bot]@users.noreply.github.com
	git add --force --all artifact .cursor-plugin/marketplace.json
	if git diff --cached --quiet; then
	exit 0
	fi
	git commit -m "build: refresh committed Agent Bundle from ${GITHUB_SHA}"
	git push origin HEAD:main

Navigation Menu