From 6d47f8030fdcfce07ce27727e2f84fc2ae0f32b7 Mon Sep 17 00:00:00 2001 From: PRASSamin Date: Sun, 30 Aug 2026 18:23:51 +0600 Subject: [PATCH 1/2] chore(ci): remove manual npm tokens in favor of pure oidc trusted publishing --- .github/workflows/release.yml | 3 +-- packages/core/package.json | 4 ++++ packages/react/package.json | 5 ++++- tests/sample-project/package.json | 2 +- 4 files changed, 10 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c088622..949654e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -53,5 +53,4 @@ jobs: commit: 'chore(release): Version Packages' env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + NPM_CONFIG_PROVENANCE: true diff --git a/packages/core/package.json b/packages/core/package.json index 344bb40..6fe9054 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -58,5 +58,9 @@ }, "peerDependencies": { "typescript": "^5.0.0" + }, + "publishConfig": { + "access": "public", + "provenance": true } } diff --git a/packages/react/package.json b/packages/react/package.json index 41d1c7a..e90e6e1 100644 --- a/packages/react/package.json +++ b/packages/react/package.json @@ -45,7 +45,6 @@ ], "scripts": { "format": "prettier --write \"src/**/*.{ts,tsx}\"", - "publish": "npm publish --access public", "prebuild": "rm -rf dist", "build": "rollup -c", "dev": "rollup -c -w", @@ -61,5 +60,9 @@ "dependencies": { "@keybindy/core": "workspace:*", "react": "^19.1.0" + }, + "publishConfig": { + "access": "public", + "provenance": true } } diff --git a/tests/sample-project/package.json b/tests/sample-project/package.json index 4b8b8ba..c4ce594 100644 --- a/tests/sample-project/package.json +++ b/tests/sample-project/package.json @@ -12,6 +12,6 @@ }, "type": "module", "dependencies": { - "@keybindy/core": "^1.1.6" + "@keybindy/core": "workspace:*" } } From 7c25e54b42158df3df79b741e7ca9312662e305b Mon Sep 17 00:00:00 2001 From: PRASSamin Date: Sun, 30 Aug 2026 18:26:06 +0600 Subject: [PATCH 2/2] chore: update pnpm-lock.yaml for workspace dependency synchronization --- pnpm-lock.yaml | 13 ++----------- 1 file changed, 2 insertions(+), 11 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 680ff7b..d0a27fc 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -104,8 +104,8 @@ importers: tests/sample-project: dependencies: '@keybindy/core': - specifier: ^1.1.6 - version: 1.1.7(typescript@5.9.2) + specifier: workspace:* + version: link:../../packages/core devDependencies: vite: specifier: ^6.2.0 @@ -674,11 +674,6 @@ packages: '@jridgewell/trace-mapping@0.3.29': resolution: {integrity: sha512-uw6guiW/gcAGPDhLmd77/6lW8QLeiV5RUTsAX46Db6oLhGaVj4lhnPwb184s1bkc8kdVg/+h988dro8GRDpmYQ==} - '@keybindy/core@1.1.7': - resolution: {integrity: sha512-IXcPAb5CIlPVVDQcsoir1m7OaJvfboWwYftQukYT87EZkKV2VNZVjPLCsUp5/eJBzq7FuMNMj22vM9UPOFTO7w==} - peerDependencies: - typescript: ^5.0.0 - '@manypkg/find-root@1.1.0': resolution: {integrity: sha512-mki5uBvhHzO8kYYix/WRy2WX8S3B5wdVSc9D6KcU5lQNglP2yt58/VfLuAK49glRXChosY8ap2oJ1qgma3GUVA==} @@ -2653,10 +2648,6 @@ snapshots: '@jridgewell/resolve-uri': 3.1.2 '@jridgewell/sourcemap-codec': 1.5.4 - '@keybindy/core@1.1.7(typescript@5.9.2)': - dependencies: - typescript: 5.9.2 - '@manypkg/find-root@1.1.0': dependencies: '@babel/runtime': 7.28.2