* feat(frontend): show real project version on About page The About page heading was hardcoded "About DeerFlow 2.0" while the real version is 2.1.0, kept in lockstep across backend/pyproject.toml, frontend/package.json, and Chart.yaml by scripts/verify_versions.sh. With the nightly workflow shipping unreleased main daily, a hardcoded version drifts further from reality every day. Wire the heading to the real version, nightly-aware: - src/version.ts reads NEXT_PUBLIC_APP_VERSION (nightly override) with a package.json fallback for release/local builds. - about-content.ts interpolates APP_VERSION into the heading; the "DeerFlow 1.0 and 2.0" milestone copy in acknowledgments is left as-is. - Dockerfile adds ARG APP_VERSION / ENV NEXT_PUBLIC_APP_VERSION in the builder stage so nightly CI can stamp the version. - nightly.yaml computes the nightly string once in prepare (<base>-nightly.<date>-<sha>, mirroring the chart scheme) and feeds it to both the frontend image build-arg and the chart publish (refactored to consume the shared output, so the displayed version and chart version can't drift). Release builds (container.yaml) are untouched and fall back to package.json. Tests cover the version branches and the heading interpolation; RELEASING.md notes the About page as a derived version consumer. * test(frontend): assert positive About-page version value Address review feedback on #4126: the unset-env assertion was negative-only (checked the stale "2.0" literal was gone), so it would still pass if APP_VERSION interpolated to "" or undefined. Mirror version.test.ts by asserting the heading carries the real resolved APP_VERSION. * ci(nightly): fail loudly on empty base version Address review feedback on #4126: the prepare step's BASE (parsed from Chart.yaml) had no empty-guard. A malformed/missing version would yield `-nightly.<date>-<sha>` (invalid semver) that now flows into both the chart publish and the frontend About-page version. Add `set -euo pipefail` plus a `test -n "$BASE"` guard mirroring publish-chart. `pipefail` matters - without it the pipeline's exit code is awk's, so `set -e` alone wouldn't catch a grep miss.
6.3 KiB
Releasing DeerFlow
DeerFlow releases are tag-driven: pushing a v* git tag triggers the
publishing workflows. There is no separate release script that bumps versions —
the maintainer bumps the version sources, updates the changelog, commits, and
tags. The helper scripts below keep the version sources in lockstep, and CI
gates the release on them agreeing with the tag.
Version sources
A release version must appear, identically, in four places:
| File | Field |
|---|---|
backend/pyproject.toml |
version = "X.Y.Z" |
frontend/package.json |
"version": "X.Y.Z" |
deploy/helm/deer-flow/Chart.yaml |
version: X.Y.Z |
deploy/helm/deer-flow/Chart.yaml |
appVersion: "X.Y.Z" |
Plus the git tag vX.Y.Z itself, which is the canonical release identifier.
Container images are tagged from the git tag (not from these files), and the Helm chart version is validated against the tag — so if any source lags the tag, the release is blocked (see Version gate).
The frontend's in-app About page (Settings ▸ About) is a derived consumer, not
a fifth source: it reads frontend/package.json's version at build time, so it
tracks the table above automatically with no bump needed. Nightly builds override
it with the chart's nightly string (<base>-nightly.<YYYYMMDD>-<short_sha>) via
the APP_VERSION build-arg in nightly.yaml, so a nightly image's About page
distinguishes it from a release.
Helper scripts
scripts/bump_version.sh <version>— set all four fields at once, then self-verify. Tolerates a leadingv(e.g.v2.2.0).scripts/bump_version.sh 2.2.0scripts/verify_versions.sh [version]— check that all sources agree. With no argument it requires mutual equality; with an argument it requires every source to equal it. Exits non-zero on mismatch. Run it locally before tagging to catch drift early:scripts/verify_versions.sh 2.2.0
Release procedure
- Bump the version across all sources:
scripts/bump_version.sh 2.2.0 - Update
CHANGELOG.md: rename the## [Unreleased]section to## [2.2.0] — YYYY-MM-DD(note the em dash—), and add a link reference at the bottom of the file:Start a fresh[2.2.0]: https://github.com/bytedance/deer-flow/releases/tag/v2.2.0## [Unreleased]section above it for the next cycle. - Commit the version + changelog changes:
git add -A git commit -m "release: v2.2.0" - Tag and push:
Pushing the tag triggers the publishing workflows (below).
git tag v2.2.0 git push origin v2.2.0
What CI publishes on a v* tag
.github/workflows/container.yaml— builds and pushesbackend,frontend, andprovisionerimages toghcr.io, tagged with the release version (andlateston the default branch)..github/workflows/chart.yaml— packages the Helm chart and pushes it as an OCI artifact toghcr.io. Users install with:helm install deer-flow oci://ghcr.io/<owner>/deer-flow --version 2.2.0
Nightly builds
.github/workflows/nightly.yaml runs on a schedule (and workflow_dispatch)
to publish the same three images plus the chart from unreleased main. It is
not gated by the version check (there is no v* tag) and it does not
touch the latest tag, which stays pinned to the last v* release. Every job
is gated on github.repository == 'bytedance/deer-flow', so it only runs on
the upstream repo - a scheduled run or manual dispatch on a fork skips all jobs.
Artifacts (under the running repo's owner, where <date> is YYYYMMDD):
- Images:
ghcr.io/<owner>/deer-flow-{backend,frontend,provisioner}:nightly(rolling, overwritten each run) and:nightly-<date>(pinned to a day, but mutable within it - a same-day re-dispatch overwrites it). For a truly immutable pin, use:sha-<short>. - Chart:
oci://ghcr.io/<owner>/deer-flow, version<base>-nightly.<date>-<sha>(e.g.2.2.0-nightly.20260710-77a3652). The short SHA makes each dispatch's chart version unique, so a same-day re-dispatch re-publishes cleanly (OCI chart versions are immutable and otherwise can't be overwritten). The packaged chart defaultsimage.registry=ghcr.io/<owner>andimage.tag=nightly, so installing it pulls the matching nightly images with no values overrides:helm install deer-flow oci://ghcr.io/<owner>/deer-flow \ --version 2.2.0-nightly.20260710-77a3652
The chart version is patched in-workflow only - Chart.yaml and values.yaml
in the repo are never modified.
Version gate
Both publishing workflows call .github/workflows/verify-versions.yml as their
first job. It runs scripts/verify_versions.sh against the tag (minus the
v). If any of the four version sources doesn't match the tag, the verify job
fails and all publish jobs are skipped — no images, no chart.
When it fails, the job annotation names the offending file and suggests the fix:
::error::frontend/package.json is '2.1.0' but expected '2.2.0'.
Tip: run scripts/bump_version.sh 2.2.0 to align all sources.
Pre-releases (RCs)
Pre-release tags like v2.2.0-rc1 are valid v* tags and trigger the same
workflows. The version sources must equal the full pre-release string
(2.2.0-rc1) — the gate compares exact strings. Use the same procedure with
the rc version:
scripts/bump_version.sh 2.2.0-rc1
# update CHANGELOG, commit, tag v2.2.0-rc1, push
Recovering from a failed gate
If the gate failed because a source was forgotten:
- Run
scripts/bump_version.sh <version>to align the sources. - Amend or add a follow-up commit.
- Delete and re-create the tag, then push it:
git tag -d v2.2.0 git tag v2.2.0 git push origin :refs/tags/v2.2.0 git push origin v2.2.0
Re-pushing the tag re-triggers the workflows. Because the gate blocks all artifacts when it fails, nothing was published under the bad tag, so re-tagging is safe — no images or chart were pushed to overwrite.
Post-release
Optionally draft a GitHub Release from the tag, pasting the corresponding
CHANGELOG.md section as the release notes. The changelog link references
point at these release URLs.