Skip to content

ci: changesets v3 & split release workflow - #8051

Open
Sheraff wants to merge 2 commits into
mainfrom
changesets-v3-split-release
Open

ci: changesets v3 & split release workflow#8051
Sheraff wants to merge 2 commits into
mainfrom
changesets-v3-split-release

Conversation

@Sheraff

@Sheraff Sheraff commented Aug 12, 2026

Copy link
Copy Markdown
Collaborator

split release workflow = better security
https://e18e.dev/docs/publishing.html#standard-workflow

changesets v3 enables it
https://changesets.dev/guide/migration

Closes #7692 (a previous attempts, w/ pre-release changesets packages)

Summary by CodeRabbit

  • Release Process

    • Improved automated release handling with clearer steps for versioning, packaging, publishing, and creating release announcements.
    • Added safer, more controlled release execution across supported branches and release channels.
    • Improved build artifact handling and job-level safeguards for more reliable releases.
  • Maintenance

    • Updated release tooling and configuration to support the latest Changesets format.
    • Streamlined version updates by removing an unnecessary formatting step.

@Sheraff
Sheraff requested a review from a team as a code owner August 12, 2026 12:45
@nx-cloud

nx-cloud Bot commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

View your CI Pipeline Execution ↗ for commit 685c4de

Command Status Duration Result
nx affected --targets=test:eslint,test:unit,tes... ✅ Succeeded 10m 51s View ↗
nx run-many --target=build --exclude=examples/*... ✅ Succeeded 1m 55s View ↗

☁️ Nx Cloud last updated this comment at 2026-08-14 21:24:11 UTC

@github-actions

github-actions Bot commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

🚀 Changeset Version Preview

4 package(s) bumped directly, 19 bumped as dependents.

🟩 Patch bumps

Package Version Reason
@tanstack/react-router 1.170.28 → 1.170.29 Changeset
@tanstack/router-core 1.171.23 → 1.171.24 Changeset
@tanstack/solid-router 1.170.26 → 1.170.27 Changeset
@tanstack/vue-router 1.170.25 → 1.170.26 Changeset
@tanstack/react-start 1.168.45 → 1.168.46 Dependent
@tanstack/react-start-client 1.168.26 → 1.168.27 Dependent
@tanstack/react-start-rsc 0.1.44 → 0.1.45 Dependent
@tanstack/react-start-server 1.167.33 → 1.167.34 Dependent
@tanstack/router-cli 1.167.29 → 1.167.30 Dependent
@tanstack/router-generator 1.167.29 → 1.167.30 Dependent
@tanstack/router-plugin 1.168.31 → 1.168.32 Dependent
@tanstack/router-vite-plugin 1.167.31 → 1.167.32 Dependent
@tanstack/solid-start 1.168.43 → 1.168.44 Dependent
@tanstack/solid-start-client 1.168.25 → 1.168.26 Dependent
@tanstack/solid-start-server 1.167.32 → 1.167.33 Dependent
@tanstack/start-client-core 1.170.23 → 1.170.24 Dependent
@tanstack/start-plugin-core 1.171.35 → 1.171.36 Dependent
@tanstack/start-server-core 1.169.27 → 1.169.28 Dependent
@tanstack/start-static-server-functions 1.167.28 → 1.167.29 Dependent
@tanstack/start-storage-context 1.167.25 → 1.167.26 Dependent
@tanstack/vue-start 1.168.42 → 1.168.43 Dependent
@tanstack/vue-start-client 1.167.28 → 1.167.29 Dependent
@tanstack/vue-start-server 1.167.32 → 1.167.33 Dependent

@socket-security

socket-security Bot commented Aug 12, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​changesets/​cli@​3.0.0991007497100
Added@​changesets/​changelog-github@​1.0.01001009596100

View full report

@coderabbitai

coderabbitai Bot commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 0651a5fc-2efe-494c-a1d4-dcb24bd46683

📥 Commits

Reviewing files that changed from the base of the PR and between 9df400c and 685c4de.

📒 Files selected for processing (1)
  • .github/workflows/release.yml
🚧 Files skipped from review as they are similar to previous changes (1)
  • .github/workflows/release.yml

📝 Walkthrough

Walkthrough

The Changesets schema and package versions were upgraded. The release workflow now separates mode selection, versioning, packing, npm publication, and GitHub release creation with conditional jobs and scoped permissions.

Changes

Release pipeline modernization

Layer / File(s) Summary
Update Changesets tooling
.changeset/config.json, package.json
The Changesets schema and packages were upgraded. The changeset:version script no longer runs pnpm format.
Select release mode and prepare packages
.github/workflows/release.yml
The workflow selects prerelease or latest mode, handles versioning, and packs packages through separate conditional jobs. Branch triggers and permissions were narrowed.
Publish packages and create releases
.github/workflows/release.yml
The workflow publishes packed packages to npm with OIDC permissions, then creates GitHub releases in a separate dependent job.

Estimated code review effort: 4 (Complex) | ~45 minutes

Merge Risk: ⚪ Minimal · up to 685c4

This PR updates the release workflow and Changesets configuration; no actionable merge-blocking risk remains based on the supplied evidence.

Sequence Diagram(s)

sequenceDiagram
  participant GitHubActions
  participant select-mode
  participant version
  participant pack
  participant publish
  participant npm
  participant release
  participant GitHub
  GitHubActions->>select-mode: select release mode and channel
  select-mode->>version: provide mode and channel outputs
  version->>pack: provide publish-plan artifact
  pack->>publish: provide packed-directory artifact
  publish->>npm: publish packed packages
  publish->>release: report successful publication
  release->>GitHub: create GitHub release
Loading
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly summarizes the two main changes: upgrading to Changesets v3 and splitting the release workflow.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch changesets-v3-split-release

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-new Bot commented Aug 12, 2026

Copy link
Copy Markdown
More templates

@tanstack/arktype-adapter

npm i https://pkg.pr.new/@tanstack/arktype-adapter@8051

@tanstack/eslint-plugin-router

npm i https://pkg.pr.new/@tanstack/eslint-plugin-router@8051

@tanstack/eslint-plugin-start

npm i https://pkg.pr.new/@tanstack/eslint-plugin-start@8051

@tanstack/history

npm i https://pkg.pr.new/@tanstack/history@8051

@tanstack/nitro-v2-vite-plugin

npm i https://pkg.pr.new/@tanstack/nitro-v2-vite-plugin@8051

@tanstack/react-router

npm i https://pkg.pr.new/@tanstack/react-router@8051

@tanstack/react-router-devtools

npm i https://pkg.pr.new/@tanstack/react-router-devtools@8051

@tanstack/react-router-ssr-query

npm i https://pkg.pr.new/@tanstack/react-router-ssr-query@8051

@tanstack/react-start

npm i https://pkg.pr.new/@tanstack/react-start@8051

@tanstack/react-start-client

npm i https://pkg.pr.new/@tanstack/react-start-client@8051

@tanstack/react-start-rsc

npm i https://pkg.pr.new/@tanstack/react-start-rsc@8051

@tanstack/react-start-server

npm i https://pkg.pr.new/@tanstack/react-start-server@8051

@tanstack/router-cli

npm i https://pkg.pr.new/@tanstack/router-cli@8051

@tanstack/router-core

npm i https://pkg.pr.new/@tanstack/router-core@8051

@tanstack/router-devtools

npm i https://pkg.pr.new/@tanstack/router-devtools@8051

@tanstack/router-devtools-core

npm i https://pkg.pr.new/@tanstack/router-devtools-core@8051

@tanstack/router-generator

npm i https://pkg.pr.new/@tanstack/router-generator@8051

@tanstack/router-plugin

npm i https://pkg.pr.new/@tanstack/router-plugin@8051

@tanstack/router-ssr-query-core

npm i https://pkg.pr.new/@tanstack/router-ssr-query-core@8051

@tanstack/router-utils

npm i https://pkg.pr.new/@tanstack/router-utils@8051

@tanstack/router-vite-plugin

npm i https://pkg.pr.new/@tanstack/router-vite-plugin@8051

@tanstack/solid-router

npm i https://pkg.pr.new/@tanstack/solid-router@8051

@tanstack/solid-router-devtools

npm i https://pkg.pr.new/@tanstack/solid-router-devtools@8051

@tanstack/solid-router-ssr-query

npm i https://pkg.pr.new/@tanstack/solid-router-ssr-query@8051

@tanstack/solid-start

npm i https://pkg.pr.new/@tanstack/solid-start@8051

@tanstack/solid-start-client

npm i https://pkg.pr.new/@tanstack/solid-start-client@8051

@tanstack/solid-start-server

npm i https://pkg.pr.new/@tanstack/solid-start-server@8051

@tanstack/start-client-core

npm i https://pkg.pr.new/@tanstack/start-client-core@8051

@tanstack/start-fn-stubs

npm i https://pkg.pr.new/@tanstack/start-fn-stubs@8051

@tanstack/start-plugin-core

npm i https://pkg.pr.new/@tanstack/start-plugin-core@8051

@tanstack/start-server-core

npm i https://pkg.pr.new/@tanstack/start-server-core@8051

@tanstack/start-static-server-functions

npm i https://pkg.pr.new/@tanstack/start-static-server-functions@8051

@tanstack/start-storage-context

npm i https://pkg.pr.new/@tanstack/start-storage-context@8051

@tanstack/valibot-adapter

npm i https://pkg.pr.new/@tanstack/valibot-adapter@8051

@tanstack/virtual-file-routes

npm i https://pkg.pr.new/@tanstack/virtual-file-routes@8051

@tanstack/vue-router

npm i https://pkg.pr.new/@tanstack/vue-router@8051

@tanstack/vue-router-devtools

npm i https://pkg.pr.new/@tanstack/vue-router-devtools@8051

@tanstack/vue-router-ssr-query

npm i https://pkg.pr.new/@tanstack/vue-router-ssr-query@8051

@tanstack/vue-start

npm i https://pkg.pr.new/@tanstack/vue-start@8051

@tanstack/vue-start-client

npm i https://pkg.pr.new/@tanstack/vue-start-client@8051

@tanstack/vue-start-server

npm i https://pkg.pr.new/@tanstack/vue-start-server@8051

@tanstack/zod-adapter

npm i https://pkg.pr.new/@tanstack/zod-adapter@8051

commit: 685c4de

on:
push:
branches: [main, '*-pre', '*-maint']
# we do not support '*-maint' branches at this time

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what is the -maint suffix?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i think it was meant for "maintenance" branches, but i'm not entirely sure

Comment thread .github/workflows/release.yml
Comment thread package.json
Comment thread .github/workflows/release.yml Outdated
Comment thread .github/workflows/release.yml Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants