.github/workflows/publish.reusable.yml

@@ -16,7 +16,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
-      # ? what's this?! required for executing the node script?
       id-token: write
     steps:
       - uses: actions/checkout@v4

.github/workflows/pull_request.yml

@@ -100,22 +100,31 @@ jobs:
         uses: biomejs/setup-biome@v2
         with:
           version: latest
+
       - name: Run Lints
         run: |
-          cargo clippy
-          cargo run -p rules_check
-          biome lint
           cargo sqlx prepare --check --workspace
+          cargo clippy --fix
+          cargo run -p rules_check
+          biome lint --write
+
+      - name: Check for changes
+        run: |
+          if [[ $(git status --porcelain) ]]; then
+            git status
+            git diff
+            exit 1
+          fi
 
   test:
     name: Test
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         include:
-          # reactive once we upgrade to the latest version of pg_query that is windows-compatible
-          - os: windows-latest
-          - os: ubuntu-latest
+          # use the same images we use for compiling
+          - os: windows-2022
+          - os: ubuntu-22.04
     steps:
       - name: Checkout PR branch
         uses: actions/checkout@v4
@@ -138,8 +147,10 @@ jobs:
         run: cargo test --workspace
 
   test-js-bindings:
-    name: Test JS Bindings
-    runs-on: ubuntu-latest
+    name:
+      Test JS Bindings
+      # use the same image we use for compiling
+    runs-on: ubuntu-22.04
     services:
       postgres:
         image: postgres:latest
@@ -173,7 +184,7 @@ jobs:
 
   codegen:
     name: Check Codegen
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     services:
       postgres:
         image: postgres:latest

.github/workflows/release.yml

@@ -37,12 +37,12 @@ jobs:
     strategy:
       matrix:
         config:
-          - { os: ubuntu-latest, target: x86_64-unknown-linux-gnu }
-          - { os: ubuntu-latest, target: aarch64-unknown-linux-gnu }
-          - { os: macos-latest, target: x86_64-apple-darwin }
-          - { os: macos-latest, target: aarch64-apple-darwin }
-          - { os: windows-latest, target: x86_64-pc-windows-msvc }
-          - { os: windows-latest, target: aarch64-pc-windows-msvc }
+          - { os: ubuntu-22.04, target: x86_64-unknown-linux-gnu }
+          - { os: ubuntu-22.04, target: aarch64-unknown-linux-gnu }
+          - { os: macos-14, target: x86_64-apple-darwin }
+          - { os: macos-14, target: aarch64-apple-darwin }
+          - { os: windows-2022, target: x86_64-pc-windows-msvc }
+          - { os: windows-2022, target: aarch64-pc-windows-msvc }
 
     runs-on: ${{ matrix.config.os }}
 
@@ -87,12 +87,12 @@ jobs:
 
       # windows is a special snowflake too, it saves binaries as .exe
       - name: 👦 Name the Binary
-        if: matrix.config.os == 'windows-latest'
+        if: matrix.config.os == 'windows-2022'
         run: |
           mkdir dist
           cp target/${{ matrix.config.target }}/release/postgrestools.exe ./dist/postgrestools_${{ matrix.config.target }}
       - name: 👦 Name the Binary
-        if: matrix.config.os != 'windows-latest'
+        if: matrix.config.os != 'windows-2022'
         run: |
           mkdir dist
           cp target/${{ matrix.config.target }}/release/postgrestools ./dist/postgrestools_${{ matrix.config.target }}
@@ -113,7 +113,7 @@ jobs:
 
   create_changelog_and_release:
     runs-on: ubuntu-latest
-    needs: build_and_test # make sure that tests & build work correctly
+    needs: [extract_version, build_and_test] # make sure that tests & build work correctly
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v4
@@ -126,10 +126,14 @@ jobs:
         id: create_changelog
         with:
           config: cliff.toml
-          args: --bump
+          args: --bump --unreleased
         env:
           GITHUB_REPO: ${{ github.repository }}
 
+      - name: Ensure tag matches
+        if: steps.create_changelog.outputs.version != needs.extract_version.outputs.version
+        run: exit 1
+
       - name: 👇 Download Artifacts
         uses: actions/download-artifact@v4
         id: download