Skip to content

ci(release): verify pkg.pr.new artifacts - #819

Merged
ScriptedAlchemy merged 1 commit into
mainfrom
ci/pkg-pr-new-release-proof
Sep 17, 2026
Merged

ScriptedAlchemy merged 1 commit into
mainfrom
ci/pkg-pr-new-release-proof

Conversation

@ScriptedAlchemy

@ScriptedAlchemy ScriptedAlchemy commented Sep 16, 2026

Copy link
Copy Markdown
Owner

Owner correction: agent-bundle distribution is pkg.pr.new only; npm publishing is not configured or expected.

Summary

  • reuse package-preview.yml from release.yml, publish once, and verify all four commit-addressed pkg.pr.new URLs
  • make the Version Packages release job depend on that preview proof, retain pnpm check:release, and remove every npm publish/token path
  • replace ci(release): green means published; surface Version Packages qualification as PR statuses #806's npm registry verification and summary states with pkg.pr.new resolution evidence
  • align release, installation, and contributor docs in English and Chinese with SHA-pinned pkg.pr.new distribution

For a Version Packages merge, a green Release packages workflow now means its merge SHA preview resolved for agent-bundle, @agent-bundle/runtime, rsc-markdown-stream, and create-agent-bundle, and the packed release gates passed.

Version Packages #809

Safe to merge after this PR lands: it only deletes its consumed changeset, bumps create-agent-bundle, and updates its changelog. Its candidate CI and release-candidate statuses are green. The resulting main push cannot run changeset publish or npm publish; it publishes and verifies the four pkg.pr.new URLs, then runs pnpm check:release.

Verification

  • actionlint .github/workflows/release.yml .github/workflows/package-preview.yml
  • bash -n scripts/verify-preview-artifacts.sh scripts/release-outcome-summary.sh
  • targeted release verifier tests: 8 passed
  • pnpm build
  • pnpm typecheck
  • pnpm lint
  • pnpm test:unit
  • pnpm check:release:ci
  • pnpm docs:site:build
  • live resolution of all four pkg.pr.new URLs for e57c0ac9c2c3a2d837ffc5603e28c96b309d0821
  • independent change-risk review on Fable; PR-head SHA issue fixed and follow-up review found no remaining actionable findings

Changeset

Workflow, tests, scripts, and documentation only; apply skip-changeset.

Merge qualification

Rebased onto current main 7c96689a1b with an unchanged patch ID. Build, typecheck, lint, docs build (zero broken links), 4,462 unit tests, and packed CI qualification (46 tests, zero failures) passed. Independent different-model review: PASS. Distribution remains commit-addressed pkg.pr.new only.

@changeset-bot

changeset-bot Bot commented Sep 16, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 9c52974

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@ScriptedAlchemy ScriptedAlchemy added the skip-changeset PR changes a publishable package but ships no observable change; changeset not required label Sep 16, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 16, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-16T20:56:31.782452Z f912cac PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f912cac7d1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

release:
name: Version Packages / release
name: Version Packages / verify release
needs: preview

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep the failure summary reachable after preview failures

When the preview job fails or is cancelled, GitHub skips this entire dependent job because needs defaults to requiring success, so the step-level if: always() on the summary is never evaluated. This also prevents changesets/action from maintaining the Version Packages PR and means the documented failed outcome is not written; use an independent always-running summary job or a job-level always() condition with the operational steps gated separately.

AGENTS.md reference: AGENTS.md:L96-L99

Useful? React with 👍 / 👎.

Comment thread README.md
Comment on lines +11 to +12
Packages are distributed through pkg.pr.new, not the npm registry. Install the
preview tarballs CI publishes for every commit and pull request:

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Remove the stale promise of a future npm channel

This now presents pkg.pr.new rather than npm as the distribution policy, but the same README still says at line 103 that pkg.pr.new is only the release channel until a final npm package name is chosen. Under this commit's owner correction those statements are mutually exclusive, leaving consumers unsure whether npm distribution is still planned; update the Status section to match the new policy.

AGENTS.md reference: AGENTS.md:L96-L99

Useful? React with 👍 / 👎.

@pkg-pr-new

pkg-pr-new Bot commented Sep 16, 2026

Copy link
Copy Markdown
npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle@819
npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/create-agent-bundle@819
npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/rsc-markdown-stream@819
npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@819

commit: f912cac

@ScriptedAlchemy
ScriptedAlchemy force-pushed the ci/pkg-pr-new-release-proof branch from f912cac to 9c52974 Compare September 17, 2026 02:07
@ScriptedAlchemy
ScriptedAlchemy merged commit 752d29a into main Sep 17, 2026
1 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip-changeset PR changes a publishable package but ships no observable change; changeset not required

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant