fix(plugins/npm-post): update signing logic

dalisoft · Apr 25, 2024 · c1d567a · c1d567a
1 parent 429fff8
commit c1d567a
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/plugins/npm-post.sh b/plugins/npm-post.sh
@@ -75,9 +75,17 @@ release() {
     git add package.json
 
     if $IS_WORKSPACE; then
-      git commit -m "Bump project ${PKG_NAME} version to ${NEXT_RELEASE_VERSION}"
+      if [ -z "${GPG_NO_SIGN-}" ] && [ -n "${GPG_KEY_ID-}" ] && [ -n "${GPG_PASSPHRASE-}" ]; then
+        git commit --sign -m "Bump project ${PKG_NAME} version to ${NEXT_RELEASE_VERSION}"
+      else
+        git commit --no-gpg-sign -m "Bump project ${PKG_NAME} version to ${NEXT_RELEASE_VERSION}"
+      fi
     else
-      git commit -m "Bump package.json version to ${NEXT_RELEASE_VERSION}"
+      if [ -z "${GPG_NO_SIGN-}" ] && [ -n "${GPG_KEY_ID-}" ] && [ -n "${GPG_PASSPHRASE-}" ]; then
+        git commit --sign -m "Bump package.json version to ${NEXT_RELEASE_VERSION}"
+      else
+        git commit --no-gpg-sign -m "Bump package.json version to ${NEXT_RELEASE_VERSION}"
+      fi
     fi
 
     if [ -n "$GIT_REMOTE_ORIGIN" ]; then