fix(semrel): direct sr25 binary (no npx prune), per-consumer monorepo install

agent-builder commented

2026-07-27 04:57:37 +00:00

Member

Hardens semantic-release toolchain resolution (erfbeeld runs 116/1069 died MODULE_NOT_FOUND). Runs the config-installed sr25 binary directly instead of npx (which prunes the --no-save config); stops preferring the sr24 prebake for shared-config consumers (version skew); adds a monorepo input that installs semantic-release-monorepo only for monorepo consumers (the config un-bundles it for security). Reaches only erfbeeld. See plan phases 1-2.

agent-builder added 1 commit

2026-07-27 04:57:41 +00:00

fix(semrel): run the config-installed sr25 binary directly; install monorepo per-consumer bdc80c4f10

Hardens the release toolchain resolution (erfbeeld runs 116/1069 died
'Cannot find module @webgrip/semantic-release-config'):

- Run './node_modules/.bin/semantic-release' (the sr25 binary the shared
  config just installed) DIRECTLY instead of 'npx semantic-release' — npx
  reifies the dep-less --no-save tree and prunes the config. Also stop
  preferring SEMREL_PREBAKED for shared-config consumers: it is sr24, a
  version skew against the sr25 config. Prebake/fallback now apply ONLY
  to inline-config consumers where the config didn't install; the
  fallback list is realigned to the sr25 line.
- New 'monorepo' input: installs semantic-release-monorepo alongside the
  config (same --no-save op, so no prune) ONLY for monorepo consumers —
  the shared config deliberately un-bundles it (2026-07-26 security
  cleanup), so it must not become a config dependency reaching everyone.
  Fixes the erfbeeld chart train's require.resolve throw.
- Thread 'monorepo' + 'config-version' through the reusable; bump the npm
  cache key to the sr25 line.

Reaches only erfbeeld (sole consumer of this composite). TODO: mirror to
infrastructure/.forgejo/actions/semantic-release-monorepo or repoint it
at this shared one.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

ryangr0 referenced this pull request from a commit

2026-07-27 04:58:48 +00:00

fix(ci): pass monorepo:true to the chart release train

ryangr0 added 1 commit

2026-07-27 07:30:22 +00:00

feat(semrel): skip-refs input (inverse of only-refs) for a dry-run validation gate f78bfae3c1

Lets a validation job run semantic-release --dry-run on feature branches
(the PR) but NOT the release branches where the real release runs, so a
config/toolchain breakage fails on the PR instead of on main.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

agent-builder referenced this pull request from webgrip/infrastructure

2026-07-27 09:49:34 +00:00

fix(semrel-fork): direct binary not npx (prune guard) #65

ryangr0 referenced this pull request from a commit

2026-07-27 09:49:35 +00:00

fix(semrel-fork): run ./node_modules/.bin/semantic-release, not npx (prune guard)

agent-builder merged commit 51f013bae5 into main

2026-07-27 10:09:39 +00:00

agent-builder referenced this pull request from a commit

2026-07-27 10:09:45 +00:00

Merge pull request 'fix(semrel): direct sr25 binary (no npx prune), per-consumer monorepo install' (#36) from fix/semrel-composite-harden into main

Rows
Columns

fix(semrel): direct sr25 binary (no npx prune), per-consumer monorepo install #36