feat: add semantic-release for automated npm publishing by snomiao · Pull Request #190 · Comfy-Org/Comfy-PR

snomiao · 2026-04-05T08:30:26Z

Summary

Replace standard-version with semantic-release for fully automated versioning
Add .github/workflows/release.yml that runs tests then publishes on push to main
npm provenance enabled via NPM_CONFIG_PROVENANCE=true
Conventional commits determine version bumps automatically

Test plan

Merge triggers release workflow on main
semantic-release publishes new version to npm

🤖 Generated with Claude Code

Replace standard-version with semantic-release for fully automated versioning and npm publishing on push to main. Includes provenance. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

vercel · 2026-04-05T08:30:31Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
comfy-pr	Ready	Preview, Comment	Apr 5, 2026 8:32am

socket-security · 2026-04-05T08:31:11Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@semantic-release/changelog@6.0.3
	@semantic-release/git@10.0.1
	@semantic-release/commit-analyzer@13.0.1
	@semantic-release/release-notes-generator@14.1.0
	@semantic-release/github@12.0.6
	@semantic-release/npm@13.1.5

View full report

Copilot

Pull request overview

This PR introduces automated npm publishing by switching the repository’s release process from a manual/version-bump flow to semantic-release driven by conventional commits, with a GitHub Actions workflow to run tests and publish on pushes to main.

Changes:

Replace the release script to run semantic-release.
Add semantic-release configuration (.releaserc.json) including changelog + git commit + GitHub release + npm publish plugins.
Add a Release GitHub Actions workflow that runs checks/tests, then runs semantic-release with npm provenance enabled.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 4 comments.

File	Description
`package.json`	Switches release command and adds semantic-release + plugins as devDependencies.
`bun.lock`	Updates lockfile to include semantic-release and its transitive dependency graph.
`.releaserc.json`	Defines semantic-release branches/plugins, changelog generation, npm publish, and git asset commits.
`.github/workflows/release.yml`	Adds CI workflow to test on push to `main` and then run semantic-release publishing (with provenance).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-04-05T08:35:18Z

    "db:setup-indexes": "bun scripts/setup-performance-indexes.ts",
    "prerelease": "bun run build && bun run test && vercel --prod",
-    "release": "bunx standard-version && npm publish",
+    "release": "npx semantic-release",


The release script invokes npx semantic-release, which can fall back to downloading and running a different semantic-release version if node_modules isn’t present/complete. To ensure the pinned dependency version is used (and avoid network installs during release), run the local binary instead (e.g., semantic-release / bunx semantic-release / npx --no-install semantic-release).

Suggested change

"release": "npx semantic-release",

"release": "semantic-release",

Copilot · 2026-04-05T08:35:18Z

+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+      - run: pip install comfy-cli setuptools


This workflow installs Python dependencies globally via pip install comfy-cli setuptools without the venv + pip-upgrade pattern used in other workflows (e.g. .github/workflows/test.yaml). Using a venv here would keep the runner environment consistent and reduce the chance of dependency resolution / permission issues on ubuntu-latest.

Suggested change

- run: pip install comfy-cli setuptools

- run: |

python -m venv .venv

. .venv/bin/activate

python -m pip install --upgrade pip

pip install comfy-cli setuptools

Copilot · 2026-04-05T08:35:18Z

+          node-version: 22
+          registry-url: https://registry.npmjs.org
+      - run: bun i
+      - run: npx semantic-release


npx semantic-release may download and execute a non-pinned semantic-release version if node_modules isn’t present/complete. Prefer invoking the locally installed binary (or use npx --no-install semantic-release) to guarantee the workflow runs the version locked in package.json/bun.lock.

Suggested change

- run: npx semantic-release

- run: ./node_modules/.bin/semantic-release

Copilot · 2026-04-05T08:35:18Z

+  issues: write
+  pull-requests: write
+  id-token: write
+


Consider adding a concurrency group to the Release workflow to prevent overlapping push runs on main. Without concurrency, two near-simultaneous pushes can start two semantic-release executions that race to create the same tag/publish, leading to flaky failures or duplicate attempts.

Suggested change

concurrency:

group: ${{ github.workflow }}-${{ github.ref }}

cancel-in-progress: false

feat: add semantic-release workflow for automated npm publishing

80455f1

Replace standard-version with semantic-release for fully automated versioning and npm publishing on push to main. Includes provenance. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Copilot AI review requested due to automatic review settings April 5, 2026 08:30

Copilot started reviewing on behalf of snomiao April 5, 2026 08:31 View session

snomiao enabled auto-merge April 5, 2026 08:32

vercel Bot deployed to Preview April 5, 2026 08:32 View deployment

snomiao merged commit 05811f0 into main Apr 5, 2026
7 checks passed

snomiao deleted the sno-release branch April 5, 2026 08:32

Copilot AI reviewed Apr 5, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: add semantic-release for automated npm publishing#190

feat: add semantic-release for automated npm publishing#190
snomiao merged 1 commit into
mainfrom
sno-release

snomiao commented Apr 5, 2026

Uh oh!

vercel Bot commented Apr 5, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Apr 5, 2026

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 5, 2026

Uh oh!

Copilot AI Apr 5, 2026

Uh oh!

Copilot AI Apr 5, 2026

Uh oh!

Copilot AI Apr 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	"release": "npx semantic-release",
	"release": "semantic-release",

-      - run: pip install comfy-cli setuptools
+      - run: |
+          python -m venv .venv
+          . .venv/bin/activate
+          python -m pip install --upgrade pip
+          pip install comfy-cli setuptools

	- run: npx semantic-release
	- run: ./node_modules/.bin/semantic-release

+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false

Uh oh!

Conversation

snomiao commented Apr 5, 2026

Summary

Test plan

Uh oh!

vercel Bot commented Apr 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Apr 5, 2026

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Apr 5, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 5, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 5, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 5, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel Bot commented Apr 5, 2026 •

edited

Loading