ci(release-please): bump action to v5.0.0-oce.3 - #28
Merged
Conversation
v5.0.0-oce.3 is the first release-please-action tag whose bundled dist/index.js actually defaults annotatedTag to true. The library change merged earlier, but the action's package-lock.json pinned the old library commit and every build path uses npm ci, so oce.2 still shipped the lightweight-tag behavior. The workflow header and README already describe annotated tags as the default; this bump is what makes that claim true. README carried the same hardcoded ref and moves with it. Assisted-by: Claude Code
kojiromike
marked this pull request as ready for review
September 1, 2026 21:49
This was referenced Sep 2, 2026
kojiromike
added a commit
that referenced
this pull request
Sep 2, 2026
Tag 1.0.1 was cut from a commit that predates the bump of release-please-reusable.yml to release-please-action v5.0.0-oce.3 (#28), and that bump landed as a ci: commit, which this repo's release-please config treats as hidden and non-releasing. Consumers pinned at 1.0.x therefore still run the opt-in annotated-tag build. Force a release so Dependabot can move them. Release-As: 1.0.2 Assisted-by: Claude Code
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
v5.0.0-oce.3will be the firstrelease-please-actiontag whose bundleddist/index.jsactually defaultsannotatedTagtotrue.The library change (openCoreEMR/release-please#4) merged some time ago, but
release-please-actionpins the library by branch inpackage.jsonwhilepackage-lock.jsonpins a commit, and every build path usesnpm ci. The branch pin therefore behaved as a SHA pin:v5.0.0-oce.2still ships the lightweight-tag behavior. openCoreEMR/release-please-action#2 moves the lockfile and rebuildsdist/.#25 already updated this repo's README and the workflow header to say annotated tags are the default. That claim becomes true only with this bump. The README carried the same hardcoded ref, so it moves here too.
Blocked on
rebase/v5.v5.0.0-oce.3annotated + signed tag being cut fromorigin/rebase/v5and its GitHub release published.Mark ready for review once the tag exists.
Downstream
Most org repos reach the action through this reusable workflow, pinned at
@1.0.0, so they pick the bump up via Dependabot once this merges and a newgithub-workflows-publicrelease is cut. Four repos call the action directly and need their own Dependabot bumps:public-website(oce.1),oce-api-harness(oce.1),oce-authz-policies(oce.1),github-workflows-internal(oce.2).