Skip to content

fix(kit): add repository.url for npm provenance - #18

Merged
rdlabo merged 1 commit into
mainfrom
fix/kit-repository-provenance
Jul 14, 2026
Merged

fix(kit): add repository.url for npm provenance#18
rdlabo merged 1 commit into
mainfrom
fix/kit-repository-provenance

Conversation

@rdlabo

@rdlabo rdlabo commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Summary

v21.2.0-2 で kit のみ publish 失敗(他 lib は成功)。

E422 … package.json: "repository.url" is "", expected to match
"https://github.com/rdlabo-team/ionic-angular-library" from provenance

kit の package.json に他 lib 同様の repository を追加。

Test plan

  • prebuild:kit 後に dist/kit/package.json に repository が入る
  • merge 後に 21.2.0-3 を切り直し(kit が @beta に載る)

Made with Cursor


Open in Devin Review

Empty repository.url fails sigstore validation (E422) when publishing with --provenance.

Co-authored-by: Cursor <cursoragent@cursor.com>
@netlify

netlify Bot commented Jul 14, 2026

Copy link
Copy Markdown

Deploy Preview for rdlabo-ionic-angular-library ready!

Name Link
🔨 Latest commit 9de9aa6
🔍 Latest deploy log https://app.netlify.com/projects/rdlabo-ionic-angular-library/deploys/6a5602c200c1de00083db23e
😎 Deploy Preview https://deploy-preview-18--rdlabo-ionic-angular-library.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Open in Devin Review

Comment thread projects/kit/package.json
"version": "21.2.0-2",
"repository": {
"type": "git",
"url": "https://github.com/rdlabo-team/ionic-angular-library.git"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 リポジトリURLの形式が他のパッケージと一致しない

新しく追加されたリポジトリURLがHTTPS形式(projects/kit/package.json:6)で指定されているが、同リポジトリ内の他の全パッケージはSSH形式を使用しているため、パッケージ間でメタデータの一貫性が失われる。

Impact: npmパッケージのメタデータに一貫性がなくなり、ツールやスクリプトがリポジトリURLを比較・処理する際に不整合が生じる可能性がある。

他パッケージとのURL形式の不一致の詳細

既存の他パッケージはすべてSSH形式を使用している:

  • projects/photo-editor/package.json: git@github.com:rdlabo-team/ionic-angular-library.git
  • projects/scroll-header/package.json: git@github.com:rdlabo-team/ionic-angular-library.git
  • projects/scroll-strategies/package.json: git@github.com:rdlabo-team/ionic-angular-library.git

一方、今回追加された projects/kit/package.json では https://github.com/rdlabo-team/ionic-angular-library.git が使用されている。

Suggested change
"url": "https://github.com/rdlabo-team/ionic-angular-library.git"
"url": "git@github.com:rdlabo-team/ionic-angular-library.git"
Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

@rdlabo
rdlabo merged commit d572108 into main Jul 14, 2026
12 checks passed
@rdlabo
rdlabo deleted the fix/kit-repository-provenance branch July 14, 2026 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant