ci: add secure release pipeline (prepare-release workflows)#259

Merged

pkosiec merged 19 commits intomainfrom

pkosiec/centralize-release

Apr 9, 2026

Commits on Apr 8, 2026

feat: add secure release pipeline (prepare-release workflows)
pkosiec
committed
fix: remove stale config refs, split meta artifact, TS refactor
pkosiec
committed
fix: use default ~/.npmrc path for JFrog setup in prepare-release
pkosiec
committed
fix: use pnpm exec tsx to match CI conventions
pkosiec
committed
fix(appkit): trigger prepare-release pipeline test
pkosiec
committed
fix: enable getLatestTagFromAllRefs for PR branch compatibility
pkosiec
committed
fix: checkout PR head ref to fix detached HEAD for release-it
pkosiec
committed
fix: correct docs and add missing paths filter for lakebase PR trigger
pkosiec
committed
refactor: add finalize-release.ts and enhance publish-template-tag.ts
pkosiec
committed
refactor: use stream-to-packages map in finalize-release.ts
pkosiec
committed
fix: use public npm registry in publish-template-tag.ts
pkosiec
committed
revert: remove inline registry flag from publish-template-tag.ts
pkosiec
committed
fix: allow @databricks/lakebase changes in template lockfile diff check
pkosiec
committed
fix: add appkit-ui to lockfile allowlist and DCO sign-off to template sync
pkosiec
committed
test: push to HEAD instead of hardcoded main (revert or keep after testing)
pkosiec
committed
refactor: push to HEAD in template sync, remove PR triggers and temp refs from prepare-release
pkosiec
committed

Commits on Apr 9, 2026