pgmorbac-node

7 Commits

Author	SHA1	Message	Date
marc	006900a963	ci: install without a lockfile publish / publish (push) Canceled after 0s Details The repository does not commit package-lock.json, so npm ci had nothing to install from.	2026-10-20 12:44:18 +02:00
marc	5b4b2f6638	ci: publish to npmjs on version tags with trusted publishing publish / publish (push) Canceled after 0s Details Replaces the Drone pipeline: npmjs is where this package is distributed, and Verdaccio proxies it. No npm token: the workflow's OIDC identity is the npm trusted publisher, and npm records provenance for the tag's commit.	2026-10-20 12:39:26 +02:00
marc	a3ae68e07c	ci: publish to Verdaccio from Drone on push to master Same flow as the crudy monorepo packages: test, then publish the package version unless the registry already holds it.	2026-10-15 18:02:25 +02:00
marc	a307b36c4b	release: 1.0.1 Ships pgmorbac 1.0.1 (is_allowed_nocache resolves roles once per org) and its 1.0.0 -> 1.0.1 upgrade script.	2026-10-14 23:41:07 +02:00
marc	119759984c	build: pack the SQL from the crudylabs/pgmorbac GitHub release	2026-10-03 15:32:06 +02:00
marc	e496fe88d9	docs: 1.0.0 on npm predates this repository	2026-10-03 10:03:25 +02:00
marc	05e5722a0e	feat: @crudy/pgmorbac ships the SQL of each signed pgmorbac release prepack downloads the release whose version matches package.json, verifies the Ed25519 manifest against the pinned release key and the zip against its sha256, and only then extracts the control file and scripts into sql/. No SQL is committed here.	2026-10-03 09:59:59 +02:00