publish release candidates through release

Author: dobrac

.github/workflows/release.yml

@@ -2,6 +2,44 @@ name: Release
 
 on:
   workflow_dispatch:
+    inputs:
+      mode:
+        description: 'Release mode'
+        type: choice
+        options:
+          - release
+          - candidate
+        default: release
+      js-sdk:
+        description: 'Release JS SDK (candidate only)'
+        required: false
+        default: false
+        type: boolean
+      python-sdk:
+        description: 'Release Python SDK (candidate only)'
+        required: false
+        default: false
+        type: boolean
+      cli:
+        description: 'Release CLI (candidate only)'
+        required: false
+        default: false
+        type: boolean
+      tag:
+        description: 'Dist-tag for candidate (e.g. rc, beta, snapshot)'
+        required: false
+        default: 'rc'
+        type: string
+      preid:
+        description: 'Prerelease identifier (defaults to branch name, candidate only)'
+        required: false
+        default: ''
+        type: string
+      skip-tests:
+        description: 'Skip tests (candidate only)'
+        required: false
+        default: false
+        type: boolean
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
@@ -10,8 +48,10 @@ permissions:
   contents: write
 
 jobs:
+  # ── Production release ───────────────────────────────────
   is_release:
     name: Is release?
+    if: github.event.inputs.mode != 'candidate'
     runs-on: ubuntu-latest
     outputs:
       release: ${{ steps.version.outputs.release }}
@@ -156,3 +196,137 @@ jobs:
           SLACK_TITLE: Release Failed
           SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
           SLACK_CHANNEL: 'monitoring-releases'
+
+  # ── Release candidate ────────────────────────────────────
+  release-candidate:
+    name: Release Candidate
+    if: github.event.inputs.mode == 'candidate'
+    runs-on: ubuntu-latest
+
+    env:
+      IS_JS: ${{ github.event.inputs.js-sdk == 'true' }}
+      IS_CLI: ${{ github.event.inputs.cli == 'true' }}
+      IS_PYTHON: ${{ github.event.inputs.python-sdk == 'true' }}
+      PUBLISH_TAG: ${{ github.event.inputs.tag }}
+      SKIP_TESTS: ${{ github.event.inputs.skip-tests == 'true' }}
+
+    steps:
+      - name: Sanitize preid
+        run: |
+          RAW_PREID="${{ github.event.inputs.preid || github.ref_name }}"
+          echo "PREID=$(echo "$RAW_PREID" | sed 's/[^0-9A-Za-z-]/-/g')" >> "$GITHUB_ENV"
+
+      - name: Block production tags
+        run: |
+          if [ "${{ github.event.inputs.tag }}" = "latest" ]; then
+            echo "::error::Publishing with the 'latest' tag is not allowed for candidates. Use 'release' mode instead."
+            exit 1
+          fi
+
+      - name: Checkout Repo
+        uses: actions/checkout@v4
+
+      - name: Parse .tool-versions
+        uses: wistia/parse-tool-versions@v2.1.1
+        with:
+          filename: '.tool-versions'
+          uppercase: 'true'
+          prefix: 'tool_version_'
+
+      - uses: pnpm/action-setup@v4
+        if: ${{ env.IS_JS == 'true' || env.IS_CLI == 'true' }}
+        with:
+          version: '${{ env.TOOL_VERSION_PNPM }}'
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        if: ${{ env.IS_JS == 'true' || env.IS_CLI == 'true' }}
+        with:
+          node-version: '${{ env.TOOL_VERSION_NODEJS }}'
+          registry-url: https://registry.npmjs.org
+          cache: pnpm
+
+      - name: Configure pnpm
+        if: ${{ env.IS_JS == 'true' || env.IS_CLI == 'true' }}
+        run: |
+          pnpm config set auto-install-peers true
+          pnpm config set exclude-links-from-lockfile true
+
+      - name: Update npm
+        if: ${{ env.IS_JS == 'true' || env.IS_CLI == 'true' }}
+        run: |
+          npm install -g npm@^11.6
+          npm --version
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        if: ${{ env.IS_PYTHON == 'true' }}
+        with:
+          python-version: '${{ env.TOOL_VERSION_PYTHON }}'
+
+      - name: Install and configure Poetry
+        uses: snok/install-poetry@v1
+        if: ${{ env.IS_PYTHON == 'true' }}
+        with:
+          version: '${{ env.TOOL_VERSION_POETRY }}'
+          virtualenvs-create: true
+          virtualenvs-in-project: true
+          installer-parallel: true
+
+      - name: Test Python SDK
+        if: ${{ env.IS_PYTHON == 'true' && env.SKIP_TESTS != 'true' }}
+        working-directory: packages/python-sdk
+        run: |
+          poetry install
+          poetry run pytest --verbose -x
+        env:
+          E2B_API_KEY: ${{ secrets.E2B_API_KEY }}
+
+      - name: Publish Python RC
+        if: ${{ env.IS_PYTHON == 'true' }}
+        working-directory: packages/python-sdk
+        run: |
+          poetry version prerelease
+          poetry build
+          poetry config pypi-token.pypi ${PYPI_TOKEN} && poetry publish --skip-existing
+        env:
+          PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
+
+      - name: Install JS dependencies
+        if: ${{ env.IS_JS == 'true' || env.IS_CLI == 'true' }}
+        run: pnpm install --frozen-lockfile
+
+      - name: Test JS SDK
+        if: ${{ env.IS_JS == 'true' && env.SKIP_TESTS != 'true' }}
+        working-directory: packages/js-sdk
+        run: pnpm run test
+        env:
+          E2B_API_KEY: ${{ secrets.E2B_API_KEY }}
+
+      - name: Publish JS RC
+        if: ${{ env.IS_JS == 'true' }}
+        working-directory: packages/js-sdk
+        run: |
+          npm version prerelease --preid=${{ env.PREID }}
+          npm publish --tag ${{ env.PUBLISH_TAG }} --provenance
+
+      - name: Reinstall dependencies
+        if: ${{ env.IS_JS == 'true' || env.IS_CLI == 'true' }}
+        run: pnpm install --frozen-lockfile
+
+      - name: Publish CLI RC
+        if: ${{ env.IS_CLI == 'true' }}
+        working-directory: packages/cli
+        run: |
+          npm version prerelease --preid=${{ env.PREID }}
+          npm publish --tag ${{ env.PUBLISH_TAG }} --provenance
+
+      - name: Commit new versions
+        if: ${{ env.IS_JS == 'true' || env.IS_CLI == 'true' || env.IS_PYTHON == 'true' }}
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git commit -am "[skip ci] Release new versions" || exit 0
+          git push
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}