Merge pull request #10 from reside-eng/ci/publish-floating-major-tag

ci: publish floating major version tag and stop committing dist

Author: mathieudi

.github/workflows/release.yml

@@ -76,9 +76,10 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Push updates to branch for major version
-        # If a new version is published, i.e. v1.2.3 then this step will update
-        # branch "v1" to this commit.
+      - name: Publish floating major version tag
+        # If a new version is published, i.e. v1.2.3 then this step force-moves
+        # the floating major tag "v1" to this commit, so consumers can pin @v1 and
+        # Renovate (github-tags datasource reads tags, not branches) can track it.
         # https://github.com/reside-eng/npm-dependency-stats-action/branches
         # The dist folder (built) is included so that action can be used directly from Github
         # ref (where exact versions can pull from npm)
@@ -92,7 +93,9 @@ jobs:
           git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
           git add --force dist
           git commit -C HEAD --amend
-          git push https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git HEAD:refs/heads/v${{steps.semantic.outputs.new_release_major_version}}
+          MAJOR_TAG="v${{steps.semantic.outputs.new_release_major_version}}"
+          git tag -f "${MAJOR_TAG}"
+          git push -f https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git "refs/tags/${MAJOR_TAG}"
 
   notification:
     if: always()

.gitignore

@@ -9,6 +9,7 @@ node_modules
 
 # coverage + build artifacts
 coverage
+dist
 
 # IDE
 .vscode/*

AGENTS.md

@@ -27,4 +27,4 @@ yarn build              # rimraf dist/ && node build.mjs (esbuild → dist/index
 - Conventional Commits via commitlint (`commit-msg` hook). Use `feat!:` or a `BREAKING CHANGE:` footer to trigger a semantic-release major bump.
 - Pre-commit auto-restages Biome fixes and runs `tsc --noEmit`. Never `--no-verify` — fix the underlying issue.
 - Relative imports use the `.js` extension; Node built-ins use the `node:` protocol.
-- `dist/` is gitignored on `main`. The release workflow rebuilds `dist/index.mjs` and force-commits it to the `v<major>` branch on each release — do not edit `dist/` by hand.
+- `dist/` is gitignored on `main`. The release workflow rebuilds `dist/index.mjs` and force-adds it to the floating major tag (`refs/tags/v<major>`) on each release, so `@vN` resolves a runnable bundle — do not edit `dist/` by hand. Full-version tags (`vX.Y.Z`) do **not** carry `dist/`; always consume via `@vN`.