Skip to content

build: add release workflow configuration for GitHub Actions #56

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
konradmichalik merged 1 commit into from
Jan 30, 2026
Merged

build: add release workflow configuration for GitHub Actions #56

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
name: Release

on:
push:
tags:
- '*'
Comment on lines +3 to +6

@coderabbitai coderabbitai Bot Jan 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

# Check the release workflow file
cat -n .github/workflows/release.yml | head -20

Repository: konradmichalik/db-sync-tool

Length of output: 291

🏁 Script executed:

# Check if there's documentation about versioning or releases
fd -t f -e md -e txt | xargs grep -l "release\|version\|tag" | head -10

Repository: konradmichalik/db-sync-tool

Length of output: 326

🏁 Script executed:

# List recent tags to understand the tagging pattern
git tag --list | tail -20

Repository: konradmichalik/db-sync-tool

Length of output: 53

🏁 Script executed:

cat docs/development/release.md

Repository: konradmichalik/db-sync-tool

Length of output: 3290

🏁 Script executed:

# Check for versioning guidance in README and CONTRIBUTING
head -50 README.md | grep -A 5 -B 5 "version\|release\|tag"

Repository: konradmichalik/db-sync-tool

Length of output: 967

🏁 Script executed:

cat CONTRIBUTING.md | head -100

Repository: konradmichalik/db-sync-tool

Length of output: 1922

Use a stricter tag pattern to prevent accidental releases.

The wildcard pattern '*' will trigger releases on any tag, including test, lightweight, or accidental tags. The repository's release documentation explicitly requires Semantic Versioning with tags in the format vX.Y.Z. Update the pattern to 'v*.*.*' to ensure only versioned releases trigger the workflow.

Suggested change 
 on:
   push:
     tags:
-      - '*'
+      - 'v*.*.*'
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
on:
push:
tags:
- '*'
on:
push:
tags:
- 'v*.*.*'
🤖 Prompt for AI Agents 
In @.github/workflows/release.yml around lines 3 - 6, The workflow's tag trigger
currently uses a broad wildcard under on.push.tags causing releases for any tag;
update the tags pattern under on.push.tags (the tags array) from '*' to 'v*.*.*'
so the workflow only triggers for semver-style tags like vX.Y.Z.


jobs:
release:
uses: konradmichalik/reusable-github-actions/.github/workflows/release.yml@main
Comment on lines +9 to +10

@coderabbitai coderabbitai Bot Jan 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

# Check if the file exists and examine its content
cat -n .github/workflows/release.yml

Repository: konradmichalik/db-sync-tool

Length of output: 291

Pin the reusable workflow to an immutable ref (tag or SHA).

Using @main makes releases non-deterministic and exposes you to upstream changes. Pin to a versioned tag or commit SHA and update via a controlled process.

🔧 Suggested change (example) 
-    uses: konradmichalik/reusable-github-actions/.github/workflows/release.yml@main
+    uses: konradmichalik/reusable-github-actions/.github/workflows/release.yml@<TAG_OR_SHA>
🤖 Prompt for AI Agents 
In @.github/workflows/release.yml around lines 9 - 10, The reusable workflow
reference currently uses an unstable ref "uses:
konradmichalik/reusable-github-actions/.github/workflows/release.yml@main";
replace the "@main" suffix with an immutable tag or commit SHA (for example a
versioned tag like `@vX.Y.Z` or a full commit SHA) so the workflow is pinned to a
specific release, and document your update process for advancing the pinned ref
in the future.

Loading