mirror of
https://github.com/actualbudget/actual.git
synced 2026-10-12 02:10:19 +00:00
Matiss Janis AboltinsandClaude
83073b3ee0
* [AI] Require @actual-app/crdt version bump and auto-publish Adds two workflows: - crdt-version-check: fails PRs that modify files in packages/crdt/ without bumping the version in packages/crdt/package.json. - publish-crdt: publishes @actual-app/crdt to npm when the version in packages/crdt/package.json changes on master, tagging the release as crdt-v<version>. * [AI] Skip git tagging in @actual-app/crdt publish workflow Remove the tag-and-push step and the now-unused version output; downgrade contents permission to read. * [AI] Simplify crdt version-bump workflows - Drop the redundant explicit base-branch fetch (fetch-depth: 0 already retrieves all remote branches). - Remove the unreachable "no changes" guard; the pull_request paths filter already scopes the workflow to packages/crdt changes. - Replace the embedded Node semver comparison with `sort -V`. - Read versions with `jq` instead of inline Node. * [AI] Add release notes for crdt publish workflows * [AI] Restrict GITHUB_TOKEN permissions in crdt workflows Add top-level `permissions: contents: read` to both crdt workflows so the implicit jobs no longer inherit overly broad permissions (flagged by zizmor). --------- Co-authored-by: Claude <[email protected]>