Merge branch 'main' into test-pg-18

Author: rkistner

.changeset/witty-donuts-breathe.md

@@ -0,0 +1,22 @@
+---
+'@powersync/lib-service-mongodb': patch
+'@powersync/lib-service-postgres': patch
+'@powersync/lib-services-framework': patch
+'@powersync/service-module-core': patch
+'@powersync/service-module-mongodb': patch
+'@powersync/service-module-mongodb-storage': patch
+'@powersync/service-module-mysql': patch
+'@powersync/service-module-postgres': patch
+'@powersync/service-module-postgres-storage': patch
+'@powersync/service-jpgwire': patch
+'@powersync/service-jsonbig': patch
+'@powersync/service-rsocket-router': patch
+'@powersync/service-schema': patch
+'@powersync/service-core': patch
+'@powersync/service-core-tests': patch
+'@powersync/service-errors': patch
+'@powersync/service-sync-rules': patch
+'@powersync/service-types': patch
+---
+
+Migrate to trusted publishing

.github/workflows/development_image_release.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # check out full history
           # Temporarily needed for changesets
@@ -30,26 +30,13 @@ jobs:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Setup NodeJS
-        uses: actions/setup-node@v4
+      - name: Enable Corepack
+        run: corepack enable
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
         with:
           node-version-file: '.nvmrc'
-
-      - uses: pnpm/action-setup@v4
-        name: Install pnpm
-
-      - name: Get pnpm store directory
-        shell: bash
-        run: |
-          echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-
-      - uses: actions/cache@v3
-        name: Setup pnpm cache
-        with:
-          path: ${{ env.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
+          cache: pnpm
 
       - name: Install dependencies
         run: pnpm install

.github/workflows/development_packages_release.yaml

@@ -4,9 +4,15 @@ on:
   push:
     branches:
       - main
+  workflow_dispatch: # For dev publishing
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  id-token: write # Required for OIDC / trusted publishing
+  contents: write # Required for changesets pushing commits
+  pull-requests: write # Required for changesets creating PRs
+
 jobs:
   release-packages:
     name: Release Packages
@@ -15,49 +21,39 @@ jobs:
       imagePackageReleaseCreated: ${{ steps.check_image_package_release.outputs.release_created }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
-
+        uses: actions/checkout@v5
+      - name: Enable Corepack
+        run: corepack enable
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: '.nvmrc'
+          cache: pnpm
 
-      - uses: pnpm/action-setup@v4
-        name: Install pnpm
-
-      - name: Get pnpm store directory
-        shell: bash
-        run: |
-          echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-
-      - uses: actions/cache@v3
-        name: Setup pnpm cache
-        with:
-          path: ${{ env.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
+      - name: Install dependencies
+        run: pnpm install
 
-      - name: Add NPM auth
+      - name: Update npm
         run: |
-          echo "//registry.npmjs.org/:_authToken=${{secrets.NPM_TOKEN}}" >> ~/.npmrc
+          npm install -g npm@latest
+          npm --version
 
-      - name: Install dependencies
-        run: pnpm install
+      - name: Build
+        run: pnpm build:production
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets
         uses: changesets/action@v1
+        if: ${{ github.event_name == 'push' }}
         with:
           # This expects you to have a script called release which does a build for your packages and calls changeset publish
           publish: pnpm release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Check if @powersync/service-image Released
         id: check_image_package_release
-        if: steps.changesets.outputs.published == 'true'
+        if: ${{ github.event_name == 'push' && steps.changesets.outputs.published == 'true' }}
         run: |
           packages="${{ toJson(steps.changesets.outputs.publishedPackages) }}"
           echo "Packages: $packages"  # Debugging output
@@ -77,19 +73,29 @@ jobs:
           fi
 
       - name: Debug Outputs
+        if: ${{ github.event_name == 'push' }}
         run: |
           echo "Published Packages: ${{ steps.changesets.outputs.publishedPackages }}"
           echo "Released Docker Image: ${{ steps.check_image_package_release.outputs.release_created }}"
 
+      - name: Dev publish
+        if: ${{ github.event_name == 'workflow_dispatch' }}
+        run: |
+          # If no changesets are available the status check will fail
+          # We should not continue if there are no changesets    
+          pnpm changeset status
+          pnpm changeset version --no-git-tag --snapshot dev
+          pnpm changeset publish --tag dev
+
   release-docker-image:
     name: Build and Release powersync-service Docker Image
     runs-on: ubuntu-latest
     needs: release-packages
     # Only run this job if the previous release job created a release for @powersync/service-image
-    if: needs.release-packages.outputs.imagePackageReleaseCreated == 'true'
+    if: github.event_name == 'push' && needs.release-packages.outputs.imagePackageReleaseCreated == 'true'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # check out full history
           # Temporarily needed for changesets