Skip to content

ci(tools): publish 2.x patches from release/tools-2.x under the legacy-2 dist-tag - #1825

Merged
capy-ai[bot] merged 1 commit into
release/tools-2.xfrom
capy/tools-2x-publish-legacy
Oct 17, 2026
Merged

capy-ai[bot] merged 1 commit into
release/tools-2.xfrom
capy/tools-2x-publish-legacy

Conversation

@MaheshtheDev

Copy link
Copy Markdown
Member

This changes publish-tools.yml on release/tools-2.x only, so that 2.3.1 (the scope fix from #1824) can be published from this branch. Nothing on main changes: main's copy of the workflow keeps publishing 3.x to latest.

Merging this PR publishes @supermemory/tools@2.3.1 to npm under the legacy-2 dist-tag.

Changes

  • Trigger: runs on pushes to release/tools-2.x instead of main. The path filter also covers this workflow file, so the merge itself triggers the first run.
  • Dist-tag: npm publish --access public --provenance --tag legacy-2. Because the tag is explicit, publishing can't move latest, which stays on 3.1.2. Provenance and OIDC trusted publishing still work, because the workflow file name is unchanged and npm ties the trusted publisher to the file name, not the branch.
  • Version check:
    • Looks up the exact local version (npm view <pkg>@<version>) instead of comparing against latest. The old comparison would always see 3.1.2 and try to publish again.
    • Skips any version that already exists on npm.
    • Refuses any version outside 2.x.
    • Fails closed if npm can't be reached.
  • Also: bun install --frozen-lockfile and a test:unit run before publish.

What a later push does

  • A push that doesn't change packages/tools/package.json or this workflow file doesn't run the workflow at all.
  • A run where the version is already on npm skips the build and the publish.
  • A run with a non-2.x version fails before it builds anything.

Verification

  • actionlint reports no errors on the workflow.
  • I ran the version-check step locally against the live registry:
    • 2.3.1 → changed=true
    • 2.3.0 → changed=false ("already published, skipping")
    • 3.1.2 → exit 1, "only publishes 2.x"
    • registry unreachable → exit 1, "Could not check"
  • On this branch, bun install --frozen-lockfile reports no lockfile changes, bun run test:unit passes 114/114, and bun run build passes.

After the merge, npm view @supermemory/tools dist-tags should show latest: 3.1.2 and legacy-2: 2.3.1.

Open in Capy

…y-2 dist-tag

Release-branch-only change. Pushes to release/tools-2.x that touch
packages/tools/package.json or this workflow publish through the same
trusted-publishing workflow file, with --provenance and --tag legacy-2 so
'latest' (3.x) never moves. The version check now looks up the exact
local version instead of comparing against 'latest', skips versions that
already exist, refuses anything that is not 2.x, and fails closed if npm
cannot be queried. Unit tests run before publish.

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
supermemory-mcp 274a1d8 Oct 16 2026, 11:08 PM

@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
supermemory-app 274a1d8 Commit Preview URL

Branch Preview URL
Oct 16 2026, 11:10 PM

@capy-ai
capy-ai Bot marked this pull request as ready for review October 17, 2026 00:19
@capy-ai
capy-ai Bot merged commit 0c9488b into release/tools-2.x Oct 17, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant