crudy/pgmorbac-node
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
10 Commits 1 Branch 2 Tags
master
Commit Graph
4 Commits
Author SHA1 Message Date
marc 4ffaa6c815 ci: Node 24.22.2 (October 2026 security release) 2026-11-04 00:47:14 +01:00
marc 68c95e625e ci: stage releases for 2FA approval instead of publishing them
publish / publish (push) Canceled after 0s
Details 
The npm trusted publisher may only stage, so a version goes live once a
maintainer approves it with 2FA. Staging needs npm 11.15 or later; Node 24.12
ships 11.6, so the job installs a pinned npm first.
 2026-10-20 13:16:35 +02:00
marc 006900a963 ci: install without a lockfile
publish / publish (push) Canceled after 0s
Details 
The repository does not commit package-lock.json, so npm ci had nothing to
install from.
 2026-10-20 12:44:18 +02:00
marc 5b4b2f6638 ci: publish to npmjs on version tags with trusted publishing
publish / publish (push) Canceled after 0s
Details 
Replaces the Drone pipeline: npmjs is where this package is distributed, and
Verdaccio proxies it. No npm token: the workflow's OIDC identity is the npm
trusted publisher, and npm records provenance for the tag's commit.
 2026-10-20 12:39:26 +02:00