Skip to content

fix(release): accept npm trusted actor label - #36

Merged
brilliantinsane merged 1 commit into
mainfrom
fix/release-verification-actor
Jul 22, 2026
Merged

fix(release): accept npm trusted actor label#36
brilliantinsane merged 1 commit into
mainfrom
fix/release-verification-actor

Conversation

@brilliantinsane

Copy link
Copy Markdown
Owner

Summary

  • accept npm 11.17 live trusted-publishing actor label: GitHub Actions
  • keep strict trusted automation, candidate tag, and public-access validation
  • align verification fixtures with the live private-stage metadata

Why

The successful Draft Release staged all three 0.3.0 packages privately, but release:verify stopped before byte comparison because it expected the invented actor label tenkit-release. npm reports GitHub Actions for this trusted publisher.

The existing private stages are unchanged and can be verified again after this fix is merged.

Verification

  • pnpm -F @tenkit/release-tools test
  • pnpm -F @tenkit/release-tools typecheck
  • pnpm test
  • pnpm typecheck
  • pnpm lint
  • git diff --check
  • independent Standards and Spec reviews: no findings

@vercel

vercel Bot commented Jul 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
tenkit-web Skipped Skipped Jul 22, 2026 10:04pm

@brilliantinsane
brilliantinsane marked this pull request as ready for review July 22, 2026 22:09
@brilliantinsane
brilliantinsane merged commit 5b00670 into main Jul 22, 2026
3 checks passed
@brilliantinsane
brilliantinsane deleted the fix/release-verification-actor branch July 22, 2026 22:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant