Skip to content

Conversation

@amacneil
Copy link
Owner

@amacneil amacneil commented Jan 12, 2026

This line was not actually necessary. I didn't notice that it worked fine without.

Turns out upgrading NPM was the main required step to get this working.


Note

Adjusts release pipeline and TypeScript publish behavior, plus a patch version bump.

  • typescript/publish.ts: remove NODE_AUTH_TOKEN unsetting and npm --version check; add --dry-run to npm publish
  • .github/workflows/ci.yml: comment out the tag-only condition for the NPM publish step
  • pkg/dbmate/version.go: bump Version to 2.29.2

Written by Cursor Bugbot for commit 9f226dc. This will update automatically on new commits. Configure here.

@amacneil amacneil force-pushed the adrian/npm-publish-2 branch from 9ed8d73 to 9f226dc Compare January 12, 2026 03:44

- run: npm run publish
if: ${{ startsWith(github.ref, 'refs/tags/v') }}
# if: ${{ startsWith(github.ref, 'refs/tags/v') }}
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Publish condition commented out runs on all builds

Medium Severity

The if: ${{ startsWith(github.ref, 'refs/tags/v') }} condition has been commented out, causing the npm publish step to run on every CI build instead of only on tagged releases. This appears to be debugging code used to test the NODE_AUTH_TOKEN change. Combined with the --dry-run flag it's currently harmless, but if that flag is removed, this would cause unintended publish attempts on every commit.

Fix in Cursor Fix in Web

@amacneil amacneil force-pushed the adrian/npm-publish-2 branch from 9f226dc to 9f3287e Compare January 12, 2026 03:48
@amacneil amacneil merged commit 43294f7 into main Jan 12, 2026
11 checks passed
@amacneil amacneil deleted the adrian/npm-publish-2 branch January 12, 2026 03:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants