Skip to content

fix: trigger releases after provenance setup - #14795

Merged
gr2m merged 1 commit into
mainfrom
trigger-releases
Apr 28, 2026
Merged

fix: trigger releases after provenance setup#14795
gr2m merged 1 commit into
mainfrom
trigger-releases

Conversation

@gr2m

@gr2m gr2m commented Apr 28, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

@gr2m
gr2m enabled auto-merge (squash) April 28, 2026 21:38
@gr2m
gr2m merged commit 9f0e36c into main Apr 28, 2026
20 checks passed
@gr2m
gr2m deleted the trigger-releases branch April 28, 2026 21:41
This was referenced Apr 28, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🚀 Published in:

Package Version
ai 7.0.0-beta.113
@ai-sdk/alibaba 2.0.0-beta.35
@ai-sdk/amazon-bedrock 5.0.0-beta.43
@ai-sdk/angular 3.0.0-beta.113
@ai-sdk/anthropic 4.0.0-beta.39
@ai-sdk/assemblyai 3.0.0-beta.30
@ai-sdk/azure 4.0.0-beta.40
@ai-sdk/baseten 2.0.0-beta.33
@ai-sdk/black-forest-labs 2.0.0-beta.29
@ai-sdk/bytedance 2.0.0-beta.30
@ai-sdk/cerebras 3.0.0-beta.33
@ai-sdk/codemod 4.0.0-beta.3
@ai-sdk/cohere 4.0.0-beta.30
@ai-sdk/deepgram 3.0.0-beta.29
@ai-sdk/deepinfra 3.0.0-beta.33
@ai-sdk/deepseek 3.0.0-beta.31
@ai-sdk/devtools 1.0.0-beta.18
@ai-sdk/elevenlabs 3.0.0-beta.29
@ai-sdk/fal 3.0.0-beta.29
@ai-sdk/fireworks 3.0.0-beta.33
@ai-sdk/gateway 4.0.0-beta.64
@ai-sdk/gladia 3.0.0-beta.29
@ai-sdk/google 4.0.0-beta.47
@ai-sdk/google-vertex 5.0.0-beta.60
@ai-sdk/groq 4.0.0-beta.32
@ai-sdk/huggingface 2.0.0-beta.33
@ai-sdk/hume 3.0.0-beta.29
@ai-sdk/klingai 4.0.0-beta.30
@ai-sdk/langchain 3.0.0-beta.113
@ai-sdk/llamaindex 3.0.0-beta.113
@ai-sdk/lmnt 3.0.0-beta.29
@ai-sdk/luma 3.0.0-beta.29
@ai-sdk/mcp 2.0.0-beta.35
@ai-sdk/mistral 4.0.0-beta.31
@ai-sdk/moonshotai 3.0.0-beta.33
@ai-sdk/open-responses 2.0.0-beta.31
@ai-sdk/openai 4.0.0-beta.40
@ai-sdk/openai-compatible 3.0.0-beta.33
@ai-sdk/otel 1.0.0-beta.59
@ai-sdk/perplexity 4.0.0-beta.32
@ai-sdk/prodia 2.0.0-beta.32
@ai-sdk/provider 4.0.0-beta.13
@ai-sdk/provider-utils 5.0.0-beta.28
@ai-sdk/react 4.0.0-beta.113
@ai-sdk/replicate 3.0.0-beta.30
@ai-sdk/revai 3.0.0-beta.30
@ai-sdk/rsc 3.0.0-beta.114
@ai-sdk/svelte 5.0.0-beta.113
@ai-sdk/test-server 2.0.0-beta.2
@ai-sdk/togetherai 3.0.0-beta.33
@ai-sdk/valibot 3.0.0-beta.28
@ai-sdk/vercel 3.0.0-beta.33
@ai-sdk/voyage 1.0.0-beta.2
@ai-sdk/vue 4.0.0-beta.113
@ai-sdk/workflow 1.0.0-beta.28
@ai-sdk/xai 4.0.0-beta.45

gr2m added a commit that referenced this pull request Apr 28, 2026
Backports the recent main-branch fixes that re-enabled releases after
the GitHub App was retired and provenance was configured.

## Backported PRs

- #14784 — `ci(release): use \`secrets.GITHUB_TOKEN\``
- #14785 — `ci(release): git config for GITHUB_TOKEN`
- #14787 — `ci(release): sign commits by changesets/acion`
- #14791 — `ci(release): use Node 24`
- #14793 — `build(pkg): set \`repository.url\` to
https://github.com/vercel/ai`
- #14794 — `normalize package json files`
- #14795 — `fix: trigger releases after provenance setup`
- #14798 — `remove github app use in workflows`

## Notes on differences from main

- v6 lacks the `@ai-sdk/otel` and `@ai-sdk/workflow` packages — both
were excluded from the changeset and the package.json normalization
sweep.
- `release.yml` on v6 does not have the snapshot-release path that
exists on main, so only the relevant subset of
#14784/#14785/#14787/#14791 was applied. `NPM_TOKEN:
secrets.NPM_TOKEN_ELEVATED` was kept in v6 since OIDC trusted publishing
has not been configured for v6 packages.
- `auto-merge-release-prs.yml` keeps the existing `GR2M_PR_REVIEW_TOKEN`
(still needed for PR approval); only the `Bot` user-type check from
#14798 was applied.
gr2m added a commit that referenced this pull request Apr 28, 2026
Backports the recent main-branch fixes that re-enabled releases after
the GitHub App was retired and provenance was configured.

## Backported PRs

- #14784 — `ci(release): use \`secrets.GITHUB_TOKEN\``
- #14785 — `ci(release): git config for GITHUB_TOKEN`
- #14787 — `ci(release): sign commits by changesets/acion`
- #14791 — `ci(release): use Node 24`
- #14793 — `build(pkg): set \`repository.url\` to
https://github.com/vercel/ai`
- #14794 — `normalize package json files`
- #14795 — `fix: trigger releases after provenance setup`
- #14798 — `remove github app use in workflows` (the auto-merge bot-type
check + `id-token: write` follow-up)

## Notes on differences from main / v6

- v5 lacks the `@ai-sdk/bytedance`, `@ai-sdk/devtools`,
`@ai-sdk/klingai`, `@ai-sdk/open-responses`, `@ai-sdk/otel`,
`@ai-sdk/voyage`, and `@ai-sdk/workflow` packages — all excluded from
the changeset and the package.json sweep.
- v5 has no `backport.yml` or `update-model-settings.yml` workflows, so
the corresponding parts of #14798 do not apply.
- v5's `release.yml` is simpler than main's (no snapshot path, no
notify-released-PRs step), so only the relevant subset of
#14784/#14785/#14787/#14791 was applied. `NPM_TOKEN:
secrets.NPM_TOKEN_ELEVATED` was kept since OIDC trusted publishing has
not been configured for v5 packages.
- `auto-merge-release-prs.yml` keeps the existing `GR2M_PR_REVIEW_TOKEN`
(still needed for PR approval); only the `Bot` user-type check from
#14798 was applied.
- `permissions` block added to `release.yml` with `id-token: write`,
matching the v6 backport.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants