ci(github): migrate to new NuGet publish workflows and add release-drafter#16
Conversation
…after - Remove build.yaml; replace with publish-preview and publish-release - publish-preview triggers on push to main; version from Release Drafter - publish-release triggers on GitHub release published event - Add release-drafter workflow (standalone for PR labeling/draft updates) - Add pr-title-check workflow - Update slnx to reflect new workflow files Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 114bfae98f
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
|
||
| jobs: | ||
| publish: | ||
| uses: LayeredCraft/devops-templates/.github/workflows/publish-preview.yml@main |
There was a problem hiding this comment.
This workflow (and the other newly added ones) calls external reusable workflows at @main, which is a mutable ref; because these jobs also use secrets: inherit (including NUGET_API_KEY in publish jobs), any upstream change on LayeredCraft/devops-templates can silently alter release behavior or exfiltrate secrets without a change in this repo. Pin these uses: references to an immutable tag or commit SHA to make CI behavior reproducible and prevent supply-chain drift.
Useful? React with 👍 / 👎.
1 participant
Summary
build.yamlwithpublish-preview.yaml(triggers on push to main) andpublish-release.yaml(triggers on GitHub release published)release-drafter.yamlfor PR autolabeling and draft release maintenancepr-title-check.yamlfor semantic PR title validationNotes for Reviewers
.github/release-drafter.ymlwas pushed directly to main as a prerequisite (required by Release Drafter to be on the default branch)NUGET_API_KEYsecret must be configured in this repo before the publish workflows will workprereleaseIdentifieroverride — defaults topreview(stable package)🤖 Generated with Claude Code