ferrlabs/FerrFlow Release
Universal semantic versioning for monorepos and classic repos
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 6, 2026
- License
- MPL 2.0
Pinned Snippet
uses: ferrlabs/ferrflow@67982d010cde4e8c17849340b5c37da8ccb687d9 # v5.23.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| version | FerrFlow version to use (e.g. 1.2.3). Defaults to latest. | no | latest |
| mode | Action mode: "release" runs the full release pipeline. "preview" posts a PR comment with version bump preview. "publish" runs the configured publishers for the currently-released version (no bump/tag) — for a separate job that has the build toolchain + registry auth the publishers need. | no | release |
| dry_run | Run without creating releases or pushing changes | no | false |
| force_version | Force a specific version, skipping commit analysis. Format: VERSION (single repo) or NAME@VERSION (monorepo) | no | "" |
| package | For mode "publish": space-separated package names to publish (e.g. "api web"). Omit to auto-detect from the triggering tag (GITHUB_REF), falling back to every package. | no | "" |
| bot | Opt into the hosted FerrFlow bot identity (ferrflow[bot]). Requires permissions.id-token: write on the caller workflow. If false/unset, the caller's token or GITHUB_TOKEN is used as before. | no | false |
| bot_endpoint | Override the hosted bot token endpoint. Defaults to https://api.ferrlabs.com/api/v1/ferrflow/token. | no | https://api.ferrlabs.com/api/v1/ferrflow/token |
| bot_audience | OIDC audience requested from the GitHub Actions runner. Must match the server-side expected audience. | no | ferrflow.ferrlabs.com |
Outputs
no outputs