Fix the default environments infrastructure so it doesn’t fail when running commands that don’t require authentication #4062
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| # Trigger for snapit functionality | |
| issue_comment: | |
| types: | |
| - created | |
| # Trigger for changeset release functionality | |
| push: | |
| branches: | |
| - main | |
| - stable/3.* | |
| # Trigger for manual/cron release functionality | |
| schedule: | |
| - cron: '0 6 * * *' # 6:00 AM UTC every day | |
| workflow_dispatch: | |
| inputs: | |
| tag: | |
| description: 'Tag' | |
| default: 'nightly' | |
| type: choice | |
| options: | |
| - nightly | |
| - latest | |
| - experimental | |
| concurrency: | |
| group: changeset-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| env: | |
| PNPM_VERSION: '10.11.1' | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| jobs: | |
| # Snapit job - runs when /snapit comment is made on a PR | |
| snapit: | |
| name: Snapit | |
| if: ${{ github.event_name == 'issue_comment' && github.event.issue.pull_request && github.event.comment.body == '/snapit' }} | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| id-token: write | |
| steps: | |
| # WARNING: DO NOT RUN ANY CUSTOM LOCAL SCRIPT BEFORE RUNNING THE SNAPIT ACTION | |
| # This action can be executed by 3rd party users and it should not be able to run arbitrary code from a PR. | |
| - name: Checkout current branch | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup deps | |
| uses: ./.github/actions/setup-cli-deps | |
| with: | |
| node-version: 24.12.0 | |
| - name: Force snapshot changeset | |
| run: "mv .changeset/force-snapshot-build.md.ignore .changeset/force-snapshot-build.md" | |
| - name: Create snapshot version | |
| uses: Shopify/snapit@ee98df3a4a2b221fc3f06d56b9a6b60996613102 # registry-and-package-manager | |
| with: | |
| comment_is_global: 'true' | |
| comment_packages: '@shopify/cli' | |
| comment_suffix: " | |
| > [!CAUTION] | |
| > After installing, validate the version by running just `shopify` in your terminal. | |
| > If the versions don't match, you might have multiple global instances installed. | |
| > Use `which shopify` to find out which one you are running and uninstall it." | |
| comment_package_manager: 'npm' | |
| comment_command_flags: '--@shopify:registry=https://registry.npmjs.org' | |
| build_script: "pnpm nx run-many --target=bundle --all --skip-nx-cache --output-style=stream && pnpm refresh-manifests" | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| NPM_TOKEN: '' | |
| NPM_CONFIG_PROVENANCE: true | |
| SHOPIFY_CLI_BUILD_REPO: ${{ github.repository }} | |
| # Changeset release job - runs on push to main or stable branches | |
| changeset-release: | |
| name: Changeset Release | |
| if: ${{ github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && github.event.inputs.tag == '') }} | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| id-token: write | |
| steps: | |
| - uses: actions/checkout@v3 | |
| # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup deps | |
| uses: ./.github/actions/setup-cli-deps | |
| with: | |
| node-version: 24.12.0 | |
| - name: Create Release Pull Request | |
| id: changesets | |
| uses: changesets/action@e0145edc7d9d8679003495b11f87bd8ef63c0cba # v1 | |
| with: | |
| version: pnpm changeset-manifests | |
| title: Version Packages - ${{ github.ref_name }} | |
| createGithubReleases: false | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Publish packages | |
| if: steps.changesets.outputs.hasChangesets == 'false' | |
| run: pnpm release latest | |
| env: | |
| NPM_TOKEN: '' | |
| NPM_CONFIG_PROVENANCE: true | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| SHOPIFY_CLI_BUILD_REPO: ${{ github.repository }} | |
| # Manual/Cron release job - runs on schedule or manual trigger with tag | |
| manual-cron-release: | |
| name: Manual & Cron Release | |
| if: ${{ github.event_name == 'schedule' || (github.event_name == 'workflow_dispatch' && github.event.inputs.tag != '') }} | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| id-token: write | |
| steps: | |
| - uses: actions/checkout@v3 | |
| # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup deps | |
| uses: ./.github/actions/setup-cli-deps | |
| with: | |
| node-version: 24.12.0 | |
| - name: Release | |
| run: pnpm release ${{ github.event.inputs.tag || 'nightly' }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| NPM_TOKEN: '' | |
| NPM_CONFIG_PROVENANCE: true | |
| SHOPIFY_CLI_BUILD_REPO: ${{ github.repository }} |