chore: update release workflow

Author: tsvetomir

.github/workflows/cd.yml

@@ -16,9 +16,11 @@ jobs:
     environment: upload
 
     permissions:
-        id-token: write # Required by Akeyless
-        contents: read
+        id-token: write
+        contents: write
+        issues: write
         packages: read
+        pull-requests: write
 
     steps:
       - name: Import Secrets
@@ -28,23 +30,23 @@ jobs:
           access-id: ${{ secrets.GH_AKEYLESS_ACCESS_ID }}
           static-secrets: |
             {
-              "/WebComponents/prod/tokens/GH_TOKEN": "GH_TOKEN",
-              "/WebComponents/prod/tokens/PROGRESS_NPM_REGISTRY_TOKEN": "NPM_TOKEN"
+              "${{ secrets.GH_AKEYLESS_GH_TOKEN_PATH }}": "GH_TOKEN",
+              "${{ secrets.GH_AKEYLESS_NPM_TOKEN_PATH }}": "NPM_TOKEN"
             }
           export-secrets-to-environment: false
 
       - name: Check out branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0 # Fetch all branches
 
       - name: Set up Node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
-          node-version: '14'
+          node-version: '20'
 
       - name: Install modules
-        run: npm install --no-audit
+        run: npm ci --no-audit
 
       - name: Build package
         run: npm run build-package
@@ -53,7 +55,7 @@ jobs:
         run: npm run test
 
       - name: Publish release
-        run: npx ci-semantic-release
+        run: npx semantic-release
         env:
           NPM_TOKEN: ${{ steps.import-secrets.outputs.NPM_TOKEN }}
           GH_TOKEN: ${{ steps.import-secrets.outputs.GH_TOKEN }}

.github/workflows/ci.yml

@@ -18,15 +18,15 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Set up Node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
-          node-version: '14'
+          node-version: '20'
 
       - name: Install modules
-        run: npm install --no-audit
+        run: npm ci --no-audit
 
       - name: Lint
         run: npm run lint

.github/workflows/publish.yml

@@ -21,23 +21,18 @@ jobs:
         uses: LanceMcCarthy/akeyless-action@v3
         with:
           access-id: ${{ secrets.GH_AKEYLESS_ACCESS_ID }}
-          static-secrets: '{ "/WebComponents/prod/tokens/GH_TOKEN": "GH_TOKEN" }'
+          static-secrets: '{ "${{ secrets.GH_AKEYLESS_GH_TOKEN_PATH }}": "GH_TOKEN" }'
           export-secrets-to-environment: false
 
       - name: Check out master
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: master
           fetch-depth: 0 # Fetch all branches
           token: ${{ steps.import-secrets.outputs.GH_TOKEN }}
 
-      - name: Set up Node.js
-        uses: actions/setup-node@v2
-        with:
-          node-version: '14'
-
-      - name: Install modules
-        run: npm install @progress/semantic-prerelease --no-save
-
       - name: Fast-forward master to develop
-        run: npx release-master
+        run: |
+          # TODO: Remove after first sync with master
+          git checkout origin/develop -- ./tools/release-master
+          ./tools/release-master

README.md

@@ -1,5 +1,3 @@
-[![Commitizen friendly](https://img.shields.io/badge/commitizen-friendly-brightgreen.svg)](http://commitizen.github.io/cz-cli/)
-[![Build Status](https://travis-ci.org/telerik/kendo-intl.svg?branch=master)](https://travis-ci.org/telerik/kendo-intl)
 [![npm version](https://badge.fury.io/js/%40progress%2Fkendo-intl.svg)](https://badge.fury.io/js/%40telerik%2Fkendo-intl)
 
 

package.json

@@ -15,16 +15,14 @@
     "test:watch": "jest --watch -- ./test",
     "locale-tests": "jest -- ./locale-tests",
     "locale-tests:watch": "jest --watch -- ./locale-tests",
-    "lint": "eslint --quiet -- ./src ./test ./locale-tests/*.js",
-    "semantic-release": "semantic-release pre && semantic-prerelease publish && semantic-release post"
+    "lint": "eslint --quiet -- ./src ./test ./locale-tests/*.js"
   },
   "keywords": [
     "Kendo",
     "Internationalization"
   ],
   "devDependencies": {
     "@progress/kendo-package-tasks": "dev",
-    "@progress/semantic-prerelease": "^3.0.0",
     "@typescript-eslint/eslint-plugin": "^5.27.0",
     "@typescript-eslint/parser": "^5.27.0",
     "cldr-core": "^41.0.0",
@@ -42,7 +40,7 @@
     "ghooks": "^1.0.3",
     "gulp": "^4.0.0",
     "jest-cli": "^26.6.3",
-    "semantic-release": "^6.3.6",
+    "semantic-release": "^24.2.1",
     "validate-commit-msg": "^1.1.1"
   },
   "config": {
@@ -59,18 +57,17 @@
     "url": "https://github.com/telerik/kendo-intl.git"
   },
   "release": {
-    "debug": false,
-    "branchTags": {
-      "develop": "dev"
-    },
-    "fallbackTags": {
-      "dev": "latest"
-    },
-    "analyzeCommits": "@progress/semantic-prerelease/analyzeCommits",
-    "generateNotes": "@progress/semantic-prerelease/generateNotes",
-    "getLastRelease": "@progress/semantic-prerelease/getLastRelease",
-    "verifyConditions": "@progress/semantic-prerelease/verifyConditions",
-    "verifyRelease": "@progress/semantic-prerelease/verifyRelease"
+    "branches": [{
+        "name": "master",
+        "channel": "latest"
+    }, {
+        "name": "develop",
+        "prerelease": true,
+        "channel": "dev"
+    }]
+  },
+  "publishConfig": {
+    "provenance": true
   },
   "files": [
     "dist",

tools/release-master

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+set -o verbose
+BRANCH=$(git rev-parse --abbrev-ref HEAD)
+
+if [ $BRANCH != "master" ]; then
+    echo "Refusing to release from $BRANCH. This script should be running in master."
+    exit 1
+fi
+
+echo Fast-forwarding master to develop
+set -o errexit
+git fetch --quiet
+git reset --hard origin/master
+git merge --ff-only --quiet origin/develop
+set +o errexit
+
+echo Pushing master
+git push origin master