crudy/pgmorbac-node
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
10 Commits 1 Branch 2 Tags
master
Commit Graph
10 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
marc bd8e22ea5d release: 1.0.2
publish / publish (push) Canceled after 0s
Details
v1.0.2 		2026-11-06 14:23:45 +01:00
marc 4ffaa6c815 ci: Node 24.22.2 (October 2026 security release) 2026-11-04 00:47:14 +01:00
marc 68c95e625e ci: stage releases for 2FA approval instead of publishing them
publish / publish (push) Canceled after 0s
Details 
The npm trusted publisher may only stage, so a version goes live once a
maintainer approves it with 2FA. Staging needs npm 11.15 or later; Node 24.12
ships 11.6, so the job installs a pinned npm first.
v1.0.1 		2026-10-20 13:16:35 +02:00
marc 006900a963 ci: install without a lockfile
publish / publish (push) Canceled after 0s
Details 
The repository does not commit package-lock.json, so npm ci had nothing to
install from.
 2026-10-20 12:44:18 +02:00
marc 5b4b2f6638 ci: publish to npmjs on version tags with trusted publishing
publish / publish (push) Canceled after 0s
Details 
Replaces the Drone pipeline: npmjs is where this package is distributed, and
Verdaccio proxies it. No npm token: the workflow's OIDC identity is the npm
trusted publisher, and npm records provenance for the tag's commit.
 2026-10-20 12:39:26 +02:00
marc a3ae68e07c ci: publish to Verdaccio from Drone on push to master 
Same flow as the crudy monorepo packages: test, then publish the package
version unless the registry already holds it.
 2026-10-15 18:02:25 +02:00
marc a307b36c4b release: 1.0.1 
Ships pgmorbac 1.0.1 (is_allowed_nocache resolves roles once per org) and
its 1.0.0 -> 1.0.1 upgrade script.
 2026-10-14 23:41:07 +02:00
marc 119759984c build: pack the SQL from the crudylabs/pgmorbac GitHub release 2026-10-03 15:32:06 +02:00
marc e496fe88d9 docs: 1.0.0 on npm predates this repository 2026-10-03 10:03:25 +02:00
marc 05e5722a0e feat: @crudy/pgmorbac ships the SQL of each signed pgmorbac release 
prepack downloads the release whose version matches package.json, verifies the
Ed25519 manifest against the pinned release key and the zip against its sha256,
and only then extracts the control file and scripts into sql/. No SQL is
committed here.
 2026-10-03 09:59:59 +02:00