Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions .github/workflows/npm-publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -87,3 +87,25 @@ jobs:
- name: Publish igniteui-angular-extras
run: npm publish --tag ${NPM_TAG}
working-directory: dist/igniteui-angular-extras

dispatch-api-update:
needs: build
runs-on: ubuntu-latest
steps:
- name: Get app token
id: app-token
uses: actions/create-github-app-token@v2
with:
app-id: ${{ secrets.IGNITEUI_GITHUB_APP_ID }}
private-key: ${{ secrets.IGNITEUI_GITHUB_APP_PRIVATE_KEY }}
owner: IgniteUI
Comment on lines +95 to +101
Copy link

Copilot AI Apr 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pin actions/create-github-app-token to a specific commit SHA (similar to how peter-evans/repository-dispatch is pinned) to reduce supply-chain risk from upstream tag changes. Using @v2 can unintentionally pull new code without review.

Copilot uses AI. Check for mistakes.
- name: Trigger API update workflow
uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697
with:
token: ${{ steps.app-token.outputs.token }}
repository: IgniteUI/igniteui-angular-api-i18n
event-type: api-update
client-payload: |
{
"release_tag": "${{ github.event.release.tag_name }}"
}
Loading