Skip to content

feat(ci): implement signed commit via GitHub API in release process#97

Merged
philprime merged 2 commits intomainfrom
fix/release-attribution
Feb 26, 2026
Merged

feat(ci): implement signed commit via GitHub API in release process#97
philprime merged 2 commits intomainfrom
fix/release-attribution

Conversation

@philprime
Copy link
Member

No description provided.

Copilot AI review requested due to automatic review settings February 26, 2026 22:29
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR implements signed, verified commits for the CI release process by using the GitHub API instead of local git commands. This ensures commits are signed by GitHub and linked to the GitHub App, improving security and traceability.

Changes:

  • Replaced local git commit/push workflow with GitHub API-based commit creation using Octokit
  • Added new _commit_and_tag_version_signed private lane that creates commits via GitHub API
  • Removed git configuration step from CI workflow since commits are now created via API
  • Added octokit gem and its dependencies to handle GitHub API interactions

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 7 comments.

Show a summary per file
File Description
fastlane/lanes/release.rb Updated release_beta_ci lane to use new signed commit function and updated documentation
fastlane/lanes/git.rb Added _commit_and_tag_version_signed function with GitHub API integration and extracted VERSION_BUMP_FILES constant
Gemfile Added octokit gem dependency
Gemfile.lock Added octokit and sawyer dependencies with version constraints
.github/workflows/release-beta.yml Removed git configuration step and added RELEASE_BOT_TOKEN environment variable

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@philprime philprime enabled auto-merge (squash) February 26, 2026 23:03
@philprime philprime merged commit 236b320 into main Feb 26, 2026
5 checks passed
@philprime philprime deleted the fix/release-attribution branch February 26, 2026 23:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants