chore: retry publish failures in CI and re-prompt OTP

Author: ghiscoding

.github/workflows/publish-npm-latest.yml

@@ -119,9 +119,33 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_CONFIG_PROVENANCE: true
-          HUSKY: 0
+        shell: bash
         run: |
-          pnpm exec lerna publish from-package --force-publish --yes --otp ${{ steps.wait-for-secrets.outputs.OTP }}
+          # Attempt to publish all packages
+          try {
+            pnpm exec lerna publish from-package --force-publish --yes --otp ${{ steps.wait-for-secrets.outputs.OTP }}
+          } catch (error) {
+            # Check for EOTP error
+            if [[ "$error" == *"EOTP"* ]]; then
+              echo "::error title=OTP Expired::OTP has expired. Please provide a new OTP."
+              # Prompt for a new OTP
+              OTP=$(step-security/wait-for-secrets@v1 \
+                secrets: |
+                  OTP:
+                    name: 'New OTP to publish package'
+                    description: 'OTP from authenticator app' \
+                )
+              # Retry the publish command with the new OTP
+              pnpm exec lerna publish from-package --force-publish --yes --otp $OTP
+            # Check for version conflict error (replace with your actual check)
+            elif [[ "$error" == *"version conflict"* ]]; then
+              echo "::warning title=Version Conflict::A package has a version conflict. Skipping."
+            else
+              # Fail the workflow for other errors
+              echo "::error title=Publish Failed::Publishing failed with an unexpected error."
+              exit 1
+            }
+          }
 
       - name: Website Dev Build
         run: pnpm build:dev

.github/workflows/publish-npm-prerelease.yml

@@ -168,6 +168,30 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_CONFIG_PROVENANCE: true
-          HUSKY: 0
+        shell: bash
         run: |
-          pnpm exec lerna publish from-package --force-publish --dist-tag ${{ inputs.tag }} --yes --otp ${{ steps.wait-for-secrets.outputs.OTP }}
+          # Attempt to publish all packages
+          try {
+            pnpm exec lerna publish from-package --force-publish --dist-tag ${{ inputs.tag }} --yes --otp ${{ steps.wait-for-secrets.outputs.OTP }}
+          } catch (error) {
+            # Check for EOTP error
+            if [[ "$error" == *"EOTP"* ]]; then
+              echo "::error title=OTP Expired::OTP has expired. Please provide a new OTP."
+              # Prompt for a new OTP
+              OTP=$(step-security/wait-for-secrets@v1 \
+                secrets: |
+                  OTP:
+                    name: 'New OTP to publish package'
+                    description: 'OTP from authenticator app' \
+                )
+              # Retry the publish command with the new OTP
+              pnpm exec lerna publish from-package --force-publish --dist-tag ${{ inputs.tag }} --yes --otp $OTP
+            # Check for version conflict error (replace with your actual check)
+            elif [[ "$error" == *"version conflict"* ]]; then
+              echo "::warning title=Version Conflict::A package has a version conflict. Skipping."
+            else
+              # Fail the workflow for other errors
+              echo "::error title=Publish Failed::Publishing failed with an unexpected error."
+              exit 1
+            }
+          }

.github/workflows/publish-npm-prompt.yml

@@ -113,13 +113,38 @@ jobs:
               description: 'OTP from authenticator app'
 
       - name: Lerna Publish 📦
+        if: ${{ inputs.dryrun != true }}
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_CONFIG_PROVENANCE: true
-          HUSKY: 0
+        shell: bash
         run: |
-          pnpm exec lerna publish from-package --force-publish --yes --otp ${{ steps.wait-for-secrets.outputs.OTP }}
+          # Attempt to publish all packages
+          try {
+            pnpm exec lerna publish from-package --force-publish --yes --otp ${{ steps.wait-for-secrets.outputs.OTP }}
+          } catch (error) {
+            # Check for EOTP error
+            if [[ "$error" == *"EOTP"* ]]; then
+              echo "::error title=OTP Expired::OTP has expired. Please provide a new OTP."
+              # Prompt for a new OTP
+              OTP=$(step-security/wait-for-secrets@v1 \
+                secrets: |
+                  OTP:
+                    name: 'New OTP to publish package'
+                    description: 'OTP from authenticator app' \
+                )
+              # Retry the publish command with the new OTP
+              pnpm exec lerna publish from-package --force-publish --yes --otp $OTP
+            # Check for version conflict error (replace with your actual check)
+            elif [[ "$error" == *"version conflict"* ]]; then
+              echo "::warning title=Version Conflict::A package has a version conflict. Skipping."
+            else
+              # Fail the workflow for other errors
+              echo "::error title=Publish Failed::Publishing failed with an unexpected error."
+              exit 1
+            }
+          }
 
       - name: Website Dev Build
         run: pnpm build:dev