CRAFT-2033: updates to release and preview release workflows for trusted publishing by tylermorrisford · Pull Request #3219 · commercetools/ui-kit

tylermorrisford · 2026-02-13T15:02:45Z

Summary

Restructure release workflows to use a single entry point (release.yml) that dispatches to reusable workflows, matching the appkit pattern and adhering to npm trusted
publishing's single-workflow requirement
release.yml handles both push (to main) and issue_comment triggers, routing to publish-release.yml or preview-release-on-comment.yml
Preview releases are no longer restricted to preview/* branches — any PR can be preview-released with a [preview_deployment] comment
Removed --provenance flags to align with appkit

Test plan

Push to main triggers release.yml → publish-release.yml
Commenting [preview_deployment] on any PR triggers release.yml → preview-release-on-comment.yml
Preview tag is derived from the branch name with non-alphanumeric characters replaced by -
PR comment with workflow result is posted on success and failure
id-token: write permission is set on both jobs for npm trusted publishing

…usted publishing

changeset-bot · 2026-02-13T15:02:49Z

⚠️ No Changeset found

Latest commit: 760fb61

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2026-02-13T15:02:50Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ui-kit	Ready	Preview, Comment	Feb 13, 2026 5:46pm

valoriecarli · 2026-02-13T15:15:30Z

[preview_deployment]

valoriecarli · 2026-02-13T15:31:01Z

@tylermorrisford, thank you for taking this on 🙌🏻
The ticket for this might have been misleading, as there was history leading up to the appkit changes, so it was all lumped into that ticket for tracing purposes.

TL;DR - The work to switch to the trusted publishing has already been completed here

A catch was, the move to trusted publishing only allows for one workflow to be configured. The PR description here might help.

So we need to reconfigure the uikit to have a single workflow point of entry that then is directed (switched) to different publishing scenarios.

I need to see how uikit is set up, but i can def help you work thru this.
With that being said, maybe part of this is still needed. ill look into it more after this meeting.

valoriecarli · 2026-02-13T16:42:44Z

within uikit we will use release.yml as the point of entry. its mostly moving parts around.

very much like appkit it will look a lot more scaled back and contain a ref to 2 jobs:
1 will point to publish-release.yml
--note that this is the one that also contains the canary release
1 will point to publish-preview

The appkit workflows have comments that aid in explaining which each one does

ByronDWall

I see where you're going here, and this will probably work, but I think it makes sense to follow the same patterns we have in app kit for the sake of consistency and maintainability

ByronDWall · 2026-02-13T17:02:15Z

@@ -0,0 +1,40 @@
+name: Preview Release (Caller)


This should be handled in the revamped release.yaml which will call the appropriate release workflow based on the github event that triggered it

ByronDWall · 2026-02-13T17:10:22Z

-permissions:
-  id-token: write
-  contents: read
+  workflow_call:


This file should be renamed to publish-release, and updated to match the pattern in app-kit.

The new release.yml should then choose whether to run publish-release or preview-release-on-comment, like in app-kit

ByronDWall · 2026-02-13T17:15:04Z

@@ -1,19 +1,28 @@
 name: Preview Release on Comment


We should name the file `preview-release-on-comment, and update the file to match the same patterns as in app-kit

ByronDWall · 2026-02-13T17:18:04Z

+        run: |
+          if [[ ! "$BRANCH_NAME" =~ ^preview/[a-zA-Z0-9_-]+$ ]]; then
+            echo "Ignoring PR because of the branch name. Exiting workflow."
+            exit 1
+          fi


We aren't limiting preview releases to only branch names that are prefixed with preview/. We want any PR to have the ability to be preview released with the proper comment

tylermorrisford · 2026-02-13T18:31:46Z

[preview_deployment]

valoriecarli

thanks for taking this one on and for being patient as i worked through some of the differences b/w the appkit & uikit setups.

im sure you can see that the [preview_deployment] will fail as its not running the updated rule.

we can easily throw the updated rule in a pr and merge it to test it here, or just merge this and then test it. nothing will blow up too much.

tylermorrisford · 2026-02-17T19:51:00Z

thanks for taking this one on and for being patient as i worked through some of the differences b/w the appkit & uikit setups.

im sure you can see that the [preview_deployment] will fail as its not running the updated rule.

we can easily throw the updated rule in a pr and merge it to test it here, or just merge this and then test it. nothing will blow up too much.

@valoriecarli Thank you for all the help! Let's merge this and then test on one of the open PRs?

fix(release): updates to release and preview release workflows for tr…

acd6642

…usted publishing

tylermorrisford self-assigned this Feb 13, 2026

tylermorrisford requested a review from a team as a code owner February 13, 2026 15:02

fix(release): add caller for preview release

b62f863

vercel Bot deployed to Preview February 13, 2026 16:41 View deployment

ByronDWall reviewed Feb 13, 2026

View reviewed changes

tylermorrisford added 2 commits February 13, 2026 12:38

fix(release): clarify release workflow as entry point

2b77a58

fix(release): update preview release filename

e228f38

vercel Bot deployed to Preview February 13, 2026 17:41 View deployment

fix(release): rm branch name requirement for previews

8c26e6f

vercel Bot deployed to Preview February 13, 2026 17:44 View deployment

fix(release): rm provenance arg

760fb61

vercel Bot deployed to Preview February 13, 2026 17:46 View deployment

valoriecarli approved these changes Feb 17, 2026

View reviewed changes

tylermorrisford merged commit efdd04e into main Feb 17, 2026
9 checks passed

tylermorrisford deleted the CRAFT-2033 branch February 17, 2026 20:52

Conversation

tylermorrisford commented Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Uh oh!

changeset-bot Bot commented Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

vercel Bot commented Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

valoriecarli commented Feb 13, 2026

Uh oh!

valoriecarli commented Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

valoriecarli commented Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ByronDWall left a comment

Choose a reason for hiding this comment

Uh oh!

ByronDWall Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

ByronDWall Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

ByronDWall Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

ByronDWall Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

tylermorrisford commented Feb 13, 2026

Uh oh!

valoriecarli left a comment

Choose a reason for hiding this comment

Uh oh!

tylermorrisford commented Feb 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

tylermorrisford commented Feb 13, 2026 •

edited

Loading

changeset-bot Bot commented Feb 13, 2026 •

edited

Loading

vercel Bot commented Feb 13, 2026 •

edited

Loading

valoriecarli commented Feb 13, 2026 •

edited

Loading

valoriecarli commented Feb 13, 2026 •

edited

Loading