Skip to content

Conversation

@marius-kilocode
Copy link
Collaborator

Summary

  • Add @changesets/cli integration matching the kilocode repository pattern for release notes generation
  • Create .changeset configuration with @changesets/changelog-github for GitHub-flavored changelogs (PR links, commit hashes, contributor attribution)
  • Add changeset-release.yml workflow that creates/updates a "Changeset version bump" PR when changes are pushed to dev
  • Update publish.yml to trigger releases when the changeset version bump PR is merged

How it works

  1. Developers run bun run changeset to create changeset files describing their changes
  2. When PRs merge to dev, the changeset-release workflow creates a "Changeset version bump" PR
  3. When that PR is merged, the publish workflow triggers and releases with the generated changelog

- name: Setup Bun
uses: oven-sh/setup-bun@v2
with:
bun-version: latest
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

WARNING: Non-deterministic Bun version (latest) can break the release workflow

Using bun-version: latest can introduce unexpected CI breakages when Bun releases. Pin to the repo's declared Bun version (e.g. the packageManager version) to keep releases reproducible.

pull_request:
types: [closed]
# kilocode_change end
push:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SUGGESTION: Workflow triggers on push but the job is gated to PR-merge events

With the current job if, pushes to dev/snapshot-* will still start the workflow but skip jobs.publish. Consider either removing the push trigger (if releases should only come from the changeset bump PR) or expanding the job if to include the desired push cases to avoid no-op runs.

( github.event_name == 'pull_request' &&
github.event.pull_request.merged == true &&
github.event.pull_request.base.ref == 'dev' &&
contains(github.event.pull_request.title, 'Changeset version bump') ) ||
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

WARNING: Release trigger relies only on PR title substring

contains(github.event.pull_request.title, 'Changeset version bump') is fairly permissive; any merged PR to dev with that phrase in the title would satisfy this condition. To reduce accidental/undesired releases, consider also checking something that uniquely identifies the changesets bot PR (e.g. github.event.pull_request.user.login == 'github-actions[bot]' and/or matching head.ref, labels, or an expected PR branch naming convention).

@kiloconnect
Copy link
Contributor

kiloconnect bot commented Jan 29, 2026

Code Review Summary

Status: 3 Issues Found | Recommendation: Address before merge

Overview

Severity Count
CRITICAL 0
WARNING 2
SUGGESTION 1

Fix these issues in Kilo Cloud

Issue Details (click to expand)

WARNING

File Line Issue
.github/workflows/changeset-release.yml 26 bun-version: latest is non-deterministic; pin for reproducible releases
.github/workflows/publish.yml 43 Release gating relies only on PR title substring; add stronger identity checks

SUGGESTION

File Line Issue
.github/workflows/publish.yml 9 Workflow triggers on push but job is gated to PR-merge events (can cause no-op runs)
Other Observations (not in diff)

Issues found in unchanged code that cannot receive inline comments:

File Line Issue
Files Reviewed (5 files)

@marius-kilocode marius-kilocode marked this pull request as draft February 2, 2026 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants