微信小程序自动化部署完整指南：从 CI 到 miniprogram-ci 上传

feature/*       开发分支
    ↓ PR
develop         测试环境
    ↓ 合并
main            生产候选版本
    ↓ Git Tag
v1.2.0          正式发布版本

git checkout main

pnpm install --frozen-lockfile

pnpm lint
pnpm typecheck
pnpm test

VITE_API_BASE_URL=https://api.example.com
VITE_ENV=production

# uni-app
pnpm build:mp-weixin

# Taro
pnpm build:weapp

# 原生微信小程序
pnpm build

develop 更新
  → 构建测试版
  → 生成二维码
  → 上传到 GitHub Actions Artifacts
  → 通知测试人员扫码

import ci from "miniprogram-ci";

const project = new ci.Project({
  appid: process.env.WX_APPID,
  type: "miniProgram",
  projectPath: process.env.WX_PROJECT_PATH,
  privateKeyPath: process.env.WX_PRIVATE_KEY_PATH,
  ignores: ["node_modules/**/*", ".git/**/*"],
});

await ci.upload({
  project,
  version: process.env.RELEASE_VERSION,
  desc: process.env.RELEASE_DESC ?? "自动化构建",
  setting: {
    es6: true,
    minify: true,
    codeProtect: true,
    autoPrefixWXSS: true,
  },
  onProgressUpdate: console.log,
});

console.log("小程序开发版本上传完成");

name: Deploy WeChat Mini Program

on:
  push:
    branches:
      - develop
      - main
    tags:
      - "v*"

jobs:
  deploy:
    runs-on: self-hosted

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Lint
        run: pnpm lint

      - name: Type check
        run: pnpm typecheck

      - name: Build mini program
        run: pnpm build:mp-weixin
        env:
          NODE_ENV: production
          API_BASE_URL: ${{ secrets.API_BASE_URL }}

      - name: Restore upload private key
        shell: bash
        run: |
          mkdir -p .ci
          printf '%s' "${WX_PRIVATE_KEY}" > .ci/private.key
          chmod 600 .ci/private.key
        env:
          WX_PRIVATE_KEY: ${{ secrets.WX_PRIVATE_KEY }}

      - name: Generate version
        shell: bash
        run: |
          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
            echo "RELEASE_VERSION=${GITHUB_REF_NAME#v}" >> "$GITHUB_ENV"
          else
            echo "RELEASE_VERSION=0.0.${GITHUB_RUN_NUMBER}" >> "$GITHUB_ENV"
          fi

      - name: Upload mini program
        if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
        run: node scripts/upload-wechat.mjs
        env:
          WX_APPID: ${{ secrets.WX_APPID }}
          WX_PROJECT_PATH: dist/build/mp-weixin
          WX_PRIVATE_KEY_PATH: .ci/private.key
          RELEASE_VERSION: ${{ env.RELEASE_VERSION }}
          RELEASE_DESC: ${{ github.event.head_commit.message }}

      - name: Generate preview QR code
        if: github.ref == 'refs/heads/develop'
        run: node scripts/preview-wechat.mjs
        env:
          WX_APPID: ${{ secrets.WX_APPID }}
          WX_PROJECT_PATH: dist/build/mp-weixin
          WX_PRIVATE_KEY_PATH: .ci/private.key
          QR_OUTPUT_PATH: preview-qrcode.png

      - name: Upload preview QR code
        if: github.ref == 'refs/heads/develop'
        uses: actions/upload-artifact@v4
        with:
          name: wechat-preview-qrcode
          path: preview-qrcode.png

自动上传开发版
  → 测试负责人确认
  → 运营人员提交审核
  → 审核通过
  → 负责人点击发布

开发小程序模板
  → 上传到第三方平台草稿箱
  → 添加到模板库
  → 商户小程序扫码授权
  → 调用接口部署模板
  → 生成体验版
  → 提交审核
  → 查询审核结果
  → 自动或人工发布

GitHub 提交
  → 自动测试
  → 自动构建
  → develop 自动生成二维码
  → 测试确认
  → main 自动上传开发版
  → 人工提审
  → 人工发布