I've updated the warning and also adjusted the naming w/ a CI matrix job to publish 3 wasm-pack targets. I haven't used deno, but looks like it doesn't use package.json so it would need its own slightly different job probably

Test run on my fork here: https://github.com/mattrunyon/ruff/actions/runs/9935706011
Example should be published in a few minutes to https://www.npmjs.com/package/@mattrunyon/ruff-wasm-web

Nice thank you. We now need @charliermarsh to add the NPM token.

Thanks for the ping -- I'll get to this today.

@MichaReiser -- I added NPM_TOKEN to the repo with read/write access on @astral-sh.

Thanks @charliermarsh . Stupid question. How can I dry-run the workflow? And is the trigger for the npm workflow in the correct release step?

I saw something about a tag=dry-run in some other workflows. If that actually runs the publish jobs, then could add a check to instead run npm publish --dry-run if that's the case. It will just print out what would have happened, but doesn't actually check the validity of the token (it will warn if there was no token)

Nevermind, looks like dry-run probably doesn't publish based on this line in publish.yml

publishing: ${{ inputs.tag && inputs.tag != 'dry-run' }}

Hmm okay. Let's see if @charliermarsh has an idea on how to test it or we'll test on release day 😆

If anybody w/ more knowledge on the release system wants to adjust this in the future to separate build and publish, you would basically run everything except the setup-node and publish steps and upload the resulting crates/ruff_wasm/pkg to an artifact. Then download the artifacts, run setup-node and then npm publish for each.

Could also run setup-node in both build and publish and then run npm pack crates/ruff_wasm/pkg --pack-destination some_optional_dir_if_not_current_dir to create a tarball. Then upload the resulting <name>-<version>.tgz. Then npm publish <name>-<version.tgz those

@MichaReiser - You should be able to release with dry-run as the tag (it should be the pre-populated default).

The check in GitHub Actions is ${{ inputs.plan != '' && !fromJson(inputs.plan).announcement_tag_is_implicit }}. You can see an example in build-docker.yml.

There is currently nothing handling dry-run in the action and build/publish are in the same workflow. So fair warning if the action runs at all it will try to publish. I mostly wasn't sure about how the different release steps worked w/ dry-run and I thought the publish jobs were skipped entirely w/ dry-run

@mattrunyon - I will check...

Confirmed that publish jobs do not run with dry-run.

I think I would make just make the new job workflow_dispatch too and then skip the publish step if ${{ inputs.plan == '' || fromJson(inputs.plan).announcement_tag_is_implicit }}, so we can test the rest manually without publishing.

LGTM! I’ll let @MichaReiser merge.

Here's a run from my fork: https://github.com/mattrunyon/ruff/actions/runs/9963353823

If there's no token, the 2nd or 3rd to last line of the dry-run publish output will say something like "warning: You need to login to npm"

Due to how Github actions work, there's no way to dry-run this until it merges (since there's no workflow w/ the same name already on main)

Thanks again @mattrunyon for this amazing contribution. The dry run was completed successfully.

https://github.com/astral-sh/ruff/actions/runs/9969546556/job/27546697354

Yes, the packages should be published once we do the next release.