From 62ff63027166589b9803dca46693edb6f357afa5 Mon Sep 17 00:00:00 2001 From: carlos-poly Date: Fri, 6 Mar 2026 12:05:21 -0500 Subject: [PATCH 1/3] Add npm release workflow Co-Authored-By: Claude Opus 4.6 --- .github/workflows/release.yaml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 .github/workflows/release.yaml diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml new file mode 100644 index 0000000..da26b4a --- /dev/null +++ b/.github/workflows/release.yaml @@ -0,0 +1,32 @@ +name: Release + +on: + release: + types: [published] + +jobs: + publish: + name: Publish to npm + runs-on: ubuntu-22.04 + permissions: + contents: read + id-token: write + steps: + - name: Checkout Code + uses: actions/checkout@v4.1.4 + + - name: pnpm setup + uses: pnpm/action-setup@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: "22" + registry-url: "https://registry.npmjs.org" + + - run: pnpm install --frozen-lockfile + - run: pnpm test + - run: pnpm build + - run: pnpm publish --no-git-checks --access public + env: + NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} From f1ae11fcab8ac55b4d8a68bdf556b6c4953ed6a6 Mon Sep 17 00:00:00 2001 From: carlos-poly Date: Fri, 6 Mar 2026 12:10:27 -0500 Subject: [PATCH 2/3] Use OIDC provenance for npm publish Co-Authored-By: Claude Opus 4.6 --- .github/workflows/release.yaml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index da26b4a..3a9ff93 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -27,6 +27,4 @@ jobs: - run: pnpm install --frozen-lockfile - run: pnpm test - run: pnpm build - - run: pnpm publish --no-git-checks --access public - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} + - run: pnpm publish --no-git-checks --access public --provenance From 0190fb0aad5a43a54774d17950ee9b12b7c1778e Mon Sep 17 00:00:00 2001 From: carlos-poly Date: Fri, 6 Mar 2026 13:01:03 -0500 Subject: [PATCH 3/3] fix: remove no-git-checks --- .github/workflows/ci.yaml | 2 +- .github/workflows/release.yaml | 8 +++++--- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 37e1700..564af30 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -8,7 +8,7 @@ on: jobs: test: name: Test - runs-on: ubuntu-22.04 + runs-on: ubuntu-latest steps: - name: Checkout Code uses: actions/checkout@v4.1.4 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 3a9ff93..6a6d6bd 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -7,7 +7,7 @@ on: jobs: publish: name: Publish to npm - runs-on: ubuntu-22.04 + runs-on: ubuntu-latest permissions: contents: read id-token: write @@ -21,10 +21,12 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v4 with: - node-version: "22" + node-version: 24 registry-url: "https://registry.npmjs.org" - run: pnpm install --frozen-lockfile - run: pnpm test - run: pnpm build - - run: pnpm publish --no-git-checks --access public --provenance + + - name: Publish to npm + run: pnpm publish --access public --provenance --no-git-checks