mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-06 21:50:42 +00:00
121 lines
4.2 KiB
YAML
121 lines
4.2 KiB
YAML
name: OpenClaw Release Checks
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
ref:
|
|
description: Existing release tag or current full 40-character main commit SHA to validate (for example v2026.4.12 or 0123456789abcdef0123456789abcdef01234567)
|
|
required: true
|
|
type: string
|
|
|
|
concurrency:
|
|
group: openclaw-release-checks-${{ inputs.ref }}
|
|
cancel-in-progress: false
|
|
|
|
env:
|
|
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
|
|
NODE_VERSION: "24.x"
|
|
PNPM_VERSION: "10.32.1"
|
|
|
|
jobs:
|
|
# THIS WORKFLOW EXISTS SO RELEASE-TIME LIVE CHECKS CAN RUN WITHOUT BLOCKING npm PUBLISH.
|
|
# PUT THE SLOWER, EXTERNAL, OR SOMETIMES-FLAKY RELEASE CHECKS HERE INSTEAD OF
|
|
# RECOUPLING THEM TO openclaw-npm-release.yml.
|
|
validate_release_live_cache:
|
|
runs-on: blacksmith-32vcpu-ubuntu-2404
|
|
timeout-minutes: 60
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- name: Require main workflow ref for release checks
|
|
env:
|
|
WORKFLOW_REF: ${{ github.ref }}
|
|
run: |
|
|
set -euo pipefail
|
|
if [[ "${WORKFLOW_REF}" != "refs/heads/main" ]]; then
|
|
echo "Release checks must be dispatched from main so the workflow logic and secrets stay canonical." >&2
|
|
exit 1
|
|
fi
|
|
|
|
- name: Validate ref input
|
|
env:
|
|
RELEASE_REF: ${{ inputs.ref }}
|
|
run: |
|
|
set -euo pipefail
|
|
if [[ ! "${RELEASE_REF}" =~ ^v[0-9]{4}\.[1-9][0-9]*\.[1-9][0-9]*((-beta\.[1-9][0-9]*)|(-[1-9][0-9]*))?$ ]] && [[ ! "${RELEASE_REF}" =~ ^[0-9a-fA-F]{40}$ ]]; then
|
|
echo "Expected an existing release tag or current full 40-character main commit SHA, got: ${RELEASE_REF}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
- name: Checkout selected ref
|
|
uses: actions/checkout@v6
|
|
with:
|
|
ref: ${{ inputs.ref }}
|
|
fetch-depth: 0
|
|
|
|
- name: Resolve checked-out SHA
|
|
id: ref
|
|
run: echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Validate selected ref is on main
|
|
env:
|
|
RELEASE_REF: ${{ inputs.ref }}
|
|
run: |
|
|
set -euo pipefail
|
|
git fetch --no-tags origin +refs/heads/main:refs/remotes/origin/main
|
|
if [[ "${RELEASE_REF}" =~ ^[0-9a-fA-F]{40}$ ]]; then
|
|
MAIN_SHA="$(git rev-parse origin/main)"
|
|
if [[ "$(git rev-parse HEAD)" != "${MAIN_SHA}" ]]; then
|
|
echo "Commit SHA mode only supports the current origin/main HEAD. Use a release tag for older commits." >&2
|
|
exit 1
|
|
fi
|
|
else
|
|
git merge-base --is-ancestor HEAD origin/main
|
|
fi
|
|
|
|
- name: Setup Node environment
|
|
uses: ./.github/actions/setup-node-env
|
|
with:
|
|
node-version: ${{ env.NODE_VERSION }}
|
|
pnpm-version: ${{ env.PNPM_VERSION }}
|
|
install-bun: "true"
|
|
use-sticky-disk: "false"
|
|
|
|
- name: Validate live cache credentials
|
|
env:
|
|
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
|
|
OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
|
|
run: |
|
|
set -euo pipefail
|
|
if [[ -z "${OPENAI_API_KEY}" ]]; then
|
|
echo "Missing OPENAI_API_KEY secret for release checks." >&2
|
|
exit 1
|
|
fi
|
|
if [[ -z "${ANTHROPIC_API_KEY}" ]]; then
|
|
echo "Missing ANTHROPIC_API_KEY secret for release checks." >&2
|
|
exit 1
|
|
fi
|
|
|
|
# KEEP RELEASE-TIME LIVE COVERAGE HERE SO OPERATORS CAN RUN IT ON DEMAND
|
|
# WITHOUT MAKING THE PUBLISH PATH WAIT FOR A SLOW OR FLAKY EXTERNAL CHECK.
|
|
- name: Verify live prompt cache floors
|
|
env:
|
|
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
|
|
OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
|
|
OPENCLAW_LIVE_CACHE_TEST: "1"
|
|
OPENCLAW_LIVE_TEST: "1"
|
|
run: pnpm test:live:cache
|
|
|
|
- name: Summarize validated ref
|
|
env:
|
|
RELEASE_REF: ${{ inputs.ref }}
|
|
RELEASE_SHA: ${{ steps.ref.outputs.sha }}
|
|
run: |
|
|
{
|
|
echo "## Release checks"
|
|
echo
|
|
echo "- Requested ref: \`${RELEASE_REF}\`"
|
|
echo "- Validated SHA: \`${RELEASE_SHA}\`"
|
|
echo "- Check: \`pnpm test:live:cache\`"
|
|
} >> "$GITHUB_STEP_SUMMARY"
|