Skip to content

chore: trigger axi npm package build on CLI release (CLI-1696) - #7117

Closed
nick-y-snyk wants to merge 2 commits into
snyk:mainfrom
nick-y-snyk:chore/CLI-1696_trigger_axi_publish
Closed

chore: trigger axi npm package build on CLI release (CLI-1696)#7117
nick-y-snyk wants to merge 2 commits into
snyk:mainfrom
nick-y-snyk:chore/CLI-1696_trigger_axi_publish

Conversation

@nick-y-snyk

@nick-y-snyk nick-y-snyk commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

What does this PR do?

Adds axi as a 4th target in trigger-distribution-channels, alongside snyk-images, scoop-snyk, and homebrew-tap. Reuses the existing trigger_repository_event helper — fires a repository_dispatch with event_type: cli_release and client_payload: {version, release_channel} at github.com/snyk/axi/dispatches.

axi's build-on-cli-release.yml already listens for cli_release and reads client_payload.version; paired PR snyk/axi#1 teaches it to also honor client_payload.release_channel so rc/preview builds don't clobber the npm latest tag.

CLI-1696: create and publish the @snyk/axi npm package, triggered by CLI releases.

Where should the reviewer start?

trigger_repository_event in release-scripts/upload-artifacts.sh — the new call is a straight copy of the existing snyk-images/scoop-snyk/homebrew-tap entries, just a different repo + event type.

How should this be manually tested?

shellcheck clean (no new findings beyond the pre-existing style already in this file). Simulated the JSON payload construction and confirmed it parses into the exact version/release_channel keys axi's workflow reads.

Live end-to-end test blocked for now: axi has no NPM_TOKEN secret configured yet (checked repo + org-shared secrets), so a real dispatch would build fine and fail at the npm publish step. Will re-test once that's added.

What's the product update that needs to be communicated to CLI users?

None — internal release plumbing, no user-facing change.

Risk assessment

Low. trigger_repository_event failures are caught and logged, non-blocking to the rest of the release (per its existing docstring); a broken/missing axi dispatch does not fail the CLI release itself.

Adds axi as a 4th target alongside snyk-images/scoop-snyk/homebrew-tap
in trigger-distribution-channels, reusing the existing
trigger_repository_event helper (repository_dispatch, event_type
cli_release, payload {version, release_channel}). axi's
build-on-cli-release.yml already listens for this event.

CLI-1696
@nick-y-snyk
nick-y-snyk requested a review from a team as a code owner August 12, 2026 12:31
@snyk-io

snyk-io Bot commented Aug 12, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@nick-y-snyk

Copy link
Copy Markdown
Contributor Author

Superseded by #7118 — recreated as a direct branch on snyk/cli now that I have write access, rather than from a fork.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants