chore: add github workflow release.yml (#1243)

* chore: add github workflow  release.yml

* chore: add snyk_token to yml

* chore: remove snyk_token

* chore: remove snyk_token

* chore: remove snyk_token

* chore: test puppeteer

* chore: test puppeteer

* chore: test puppeteer

* chore: test master.yml

* chore: set npm version

* chore: set puppeteer version

* chore: set puppeteer version

---------

Co-authored-by: csg01123119 <csg01123119@alibaba-inc.com>
Co-authored-by: YunZZY <1263206327@qq.com>

Author: 3 people

.github/workflows/codeCov.yml

@@ -23,6 +23,7 @@ jobs:
       ALI_SDK_STS_REGION: ${{secrets.ALI_SDK_STS_REGION}}
       ALI_SDK_STS_ROLE: ${{secrets.ALI_SDK_STS_ROLE}}
       ALI_SDK_STS_SECRET: ${{secrets.ALI_SDK_STS_SECRET}}
+
     steps:
       - uses: actions/checkout@v2
       - name: test and report upload

.github/workflows/dev_node_test.yml

@@ -32,8 +32,6 @@ jobs:
 
     steps:
       - uses: actions/checkout@v2
-        with:
-          ref: develop
       - name: browser build and test
         run: |
           curl cip.cc
@@ -64,8 +62,6 @@ jobs:
 
     steps:
       - uses: actions/checkout@v2
-        with:
-          ref: develop
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v2
         with:
@@ -97,8 +93,6 @@ jobs:
 
     steps:
       - uses: actions/checkout@v2
-        with:
-          ref: develop
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v2
         with:

.github/workflows/master_node_test.yml

@@ -66,6 +66,7 @@ jobs:
         uses: actions/setup-node@v2
         with:
           node-version: ${{ matrix.node-version }}
+      - run: npm install -D npm@6.14.12
       - run: npm install
       - run: npm run test
 
@@ -97,6 +98,7 @@ jobs:
         uses: actions/setup-node@v2
         with:
           node-version: ${{ matrix.node-version }}
+      - run: npm install -D npm@6.14.16
       - run: npm install
       - run: npm run test
 
@@ -128,5 +130,6 @@ jobs:
         uses: actions/setup-node@v2
         with:
           node-version: ${{ matrix.node-version }}
+      - run: npm install -D npm@6.14.18
       - run: npm install
       - run: npm run test

.github/workflows/release.yml

@@ -0,0 +1,35 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - release
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    permissions:
+      # https://docs.github.com/zh/actions/using-jobs/assigning-permissions-to-jobs
+      contents: write # 为 GITHUB_TOKEN 授予更新tag的权限
+    env:
+      GITHUB_TOKEN: ${{ secrets.GIT_TOKEN }} # semantic-release和create-pull-request.js需要
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }} # 只有semantic-release需要
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Setup Node
+        uses: actions/setup-node@v1
+        with:
+          node-version: 18
+      - name: Install Dependencies
+        run: npm install
+      - name: Snyk Protect
+        run: npm run snyk-protect
+      - name: Release to npm
+        run: npx semantic-release
+      # - name: Publish to cdn
+      #   run: node publish.js  # 因为发cdn 的ak权限比较大，有安全风险，故需要在本地发版到cdn
+      # 为了创建pr，GIT_TOKEN需要public_repo权限（https://github.com/settings/tokens/new）
+      - name: Create Pull Request
+        run: node ./task/create-pull-request.js

.github/workflows/snyk.yml

@@ -10,6 +10,7 @@ jobs:
   security:
     environment: ali_oss_AK
     runs-on: ubuntu-latest
+
     steps:
       - uses: actions/checkout@v2
 

.prettierignore

@@ -0,0 +1,2 @@
+node_modules/
+dist/

.releaserc

@@ -0,0 +1,31 @@
+{
+  "branches": "release",
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/github",
+    [
+      "@semantic-release/npm",
+      {
+        "npmPublish": true
+      }
+    ],
+    [
+      "@semantic-release/exec",
+      {
+        "prepareCmd": "npm run build-dist"
+      }
+    ],
+    [
+      "@semantic-release/git",
+      {
+        "assets": [
+          "package.json",
+          "lib/browser/version.js",
+          "dist/*.js"
+        ],
+        "message": "chore(release): ${nextRelease.version} [skip ci]\n\n${nextRelease.notes}"
+      }
+    ]
+  ]
+}

browser-build.js

@@ -21,7 +21,7 @@ function build(options, callback) {
     options = {};
   }
 
-  console.error('Building with options: %j', options);
+  console.error('Building with options: %j %j', options, pkg.version);
 
   const verStr = `exports.version = '${pkg.version}';`;
   fs.writeFileSync(path.resolve(__dirname + '/lib/browser/version.js'), verStr);

commitlint.config.js

@@ -1 +1 @@
-module.exports = { extends: ['@commitlint/config-conventional'] };
+module.exports = { extends: ['@commitlint/config-conventional'], ignores: [message => /\[skip ci\]/m.test(message)] };

package-lock.json

@@ -30,7 +30,6 @@
     "publish-to-npm": "node publish-npm-check.js && npm publish",
     "publish-to-cdn": "node publish.js",
     "snyk-protect": "snyk-protect",
-    "prepublish": "npm run snyk-protect",
     "lint-staged": "lint-staged",
     "detect-secrets": "node task/detect-secrets",
     "tsc": "npm run tsc:clean && npm run tsc:build",
@@ -46,9 +45,18 @@
       "npm run publish-to-cdn"
     ]
   },
+  "homepage": "https://github.com/ali-sdk/ali-oss",
+  "bugs": {
+    "url": "https://github.com/ali-sdk/ali-oss/issues"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public",
+    "tag": "testtag"
+  },
   "repository": {
     "type": "git",
-    "url": "git://github.com/aliyun/oss-nodejs-sdk.git"
+    "url": "https://github.com/ali-sdk/ali-oss.git"
   },
   "keywords": [
     "oss",
@@ -58,13 +66,9 @@
   ],
   "author": "dead_horse",
   "license": "MIT",
-  "bugs": {
-    "url": "https://github.com/aliyun/oss-nodejs-sdk/issues"
-  },
   "engines": {
     "node": ">=8"
   },
-  "homepage": "https://github.com/aliyun/oss-nodejs-sdk",
   "devDependencies": {
     "@babel/core": "^7.11.6",
     "@babel/plugin-transform-regenerator": "^7.10.4",
@@ -73,6 +77,10 @@
     "@babel/runtime": "^7.11.2",
     "@commitlint/cli": "^17.6.7",
     "@commitlint/config-conventional": "^16.2.4",
+    "@octokit/core": "^5.0.0",
+    "@semantic-release/exec": "^6.0.3",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/npm": "^10.0.5",
     "@snyk/protect": "^1.1196.0",
     "@types/node": "^14.0.12",
     "@typescript-eslint/eslint-plugin": "^5.0.0",
@@ -112,7 +120,8 @@
     "nyc": "^15.1.0",
     "prettier": "^3.0.0",
     "promise-polyfill": "^6.0.2",
-    "puppeteer": "^20.9.0",
+    "puppeteer": "19.0.0",
+    "semantic-release": "^21.1.1",
     "should": "^11.0.0",
     "sinon": "^15.2.0",
     "standard-version": "^9.3.1",

package.json

@@ -0,0 +1,23 @@
+const { Octokit } = require('@octokit/core');
+const pkg = require('../package.json');
+
+const { env } = process;
+
+// Octokit.js
+// https://github.com/octokit/core.js#readme
+const octokit = new Octokit({
+  auth: env.GITHUB_TOKEN
+});
+
+// https://docs.github.com/en/rest/pulls/pulls?apiVersion=2022-11-28#create-a-pull-request
+octokit.request('POST /repos/{owner}/{repo}/pulls', {
+  owner: 'ali-sdk',
+  repo: 'ali-oss',
+  title: `release ${pkg.version} success to master`,
+  body: 'release to master',
+  head: 'release',
+  base: 'master',
+  headers: {
+    'X-GitHub-Api-Version': '2022-11-28'
+  }
+});