Skip to content

chore: add 2.0.4 release verification gate#42

Merged
Foscat merged 1 commit into
mainfrom
hotfix/2.0.4-release-verify
Jul 21, 2026
Merged

chore: add 2.0.4 release verification gate#42
Foscat merged 1 commit into
mainfrom
hotfix/2.0.4-release-verify

Conversation

@Foscat

@Foscat Foscat commented Jul 21, 2026

Copy link
Copy Markdown
Owner

Summary

  • adds a non-publishing release:verify gate to the 2.0.4 hotfix release line
  • wires prepublishOnly to the full hotfix gate instead of only npm run check
  • documents explicit approval requirements before any package, tag, or registry release

Current branch state

  • Head: 99fdf8d71a23c3bf08b15002b9f91694d702c4fe
  • Target: main / 2.0.4 hotfix release line
  • Registry state: ui-style-kit-css@2.0.4 is not published yet

Verification

  • Fresh full local gate passed: npm run release:verify
    • npm run check
    • npm run test:e2e — 28 passed
    • npm run test:visual — 33 passed
    • npm audit --audit-level=moderate — found 0 vulnerabilities
    • npm run pack:dry-runui-style-kit-css-2.0.4.tgz, 30 files, shasum ebb90299e3b0720fbcf41abb3c2f9e3a518cf894
  • Setup preflight: npm ci --ignore-scripts — 0 vulnerabilities
  • node --test tests/package-integrity.test.js red/green for the missing release gate
  • Remote PR checks passed on this head: Lint, Build, Unit Tests; Playwright E2E

No npm publish, tag, GitHub release, or merge is performed by this PR.

@Foscat Foscat self-assigned this Jul 21, 2026
@Foscat Foscat added the enhancement New feature or request label Jul 21, 2026
@Foscat
Foscat marked this pull request as ready for review July 21, 2026 03:48
Copilot AI review requested due to automatic review settings July 21, 2026 03:48

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds a dedicated non-publishing hotfix release verification gate (release:verify) for the 2.0.4 line, wires prepublishOnly to run that full verification gate, and updates publishing documentation to reflect explicit approval expectations.

Changes:

  • Add release:verify script (check + E2E + visual + audit + pack dry-run) and make prepublishOnly run it.
  • Extend package integrity tests to require release:verify and assert it remains non-publishing.
  • Update docs/PUBLISHING.md to document the new verification gate and approval requirement language.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File Description
tests/package-integrity.test.js Adds coverage to ensure release:verify exists, covers the 2.0.4 release gate commands, and remains non-publishing.
package.json Introduces release:verify and updates prepublishOnly to run it.
docs/PUBLISHING.md Documents release:verify as the hotfix verification gate and clarifies the publish flow.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +323 to +326
// Keep the hotfix verification gate safe for approval-gated release preparation.
assert.doesNotMatch(releaseVerify, /\bnpm\s+(?:publish|version)\b/);
assert.doesNotMatch(releaseVerify, /\bgit\s+tag\b/);
assert.equal(packageJson.scripts.prepublishOnly, 'npm run release:verify');
@Foscat
Foscat merged commit 2b17df1 into main Jul 21, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants