Skip to content

Use crates.io Trusted publishing to publish releases to crates.io #678

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jschwe wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Use crates.io Trusted publishing to publish releases to crates.io #678

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c52dc84
Add CI job to publish to crates.io
jschwe Dec 4, 2025
50a5b79
Always attempt to publish, and handle exists error gracefully
jschwe Dec 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 35 additions & 0 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,10 @@
# Workflow to publish crates.io and GitHub releases
# Changes to this workflow must be reviewed carefully!
name: Publish

# Workflow triggers should be strictly controlled,
# as this will trigger publishing to crates.io.
# We only want to publish on the main branch.
on:
push:
branches: [main]
Expand Down Expand Up @@ -37,10 +42,14 @@ jobs:
git fetch --tags --quiet
if ! git show-ref --tags --verify --quiet "refs/tags/${RELEASE_TAG}" ; then
gh release create ${RELEASE_TAG} ./*.tar.gz
echo "CREATE_RELEASE=true" >> ${GITHUB_OUTPUT}
else
echo "CREATE_RELEASE=false" >> ${GITHUB_OUTPUT}
fi
echo "RELEASE_TAG=${RELEASE_TAG}" >> ${GITHUB_OUTPUT}
outputs:
release-tag: ${{ steps.check-tag.outputs.RELEASE_TAG }}
create-release: ${{ steps.check-tag.outputs.CREATE_RELEASE }}

verify-release:
name: Verify release
Expand All @@ -50,3 +59,29 @@ jobs:
with:
release-tag: ${{ needs.publish-github-release.outputs.release-tag }}
rust_version: stable

# Our CI testing ensures that mozjs-sys and mozjs are always bumped together.
# We always publish both versions, since mozjs depends on a speciifc version
# of mozjs-sys
publish-crates-io:
name: Publish to crates.io
runs-on: ubuntu-latest
needs:
- publish-github-release
- verify-release
permissions:
id-token: write
if: ${{ needs.publish-github-release.outputs.create-release }}
steps:
- uses: actions/checkout@v6
- uses: rust-lang/crates-io-auth-action@v1
id: auth
# publish mozjs-sys
- run: cargo publish -p mozjs-sys
env:
CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
# Wait a bit to ensure the release is published
- run: sleep 5
- run: cargo publish -p mozjs
env:
CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
Loading