Skip to content

chore: switch npm publish to OIDC trusted publisher and simplify code…#2

Merged
Qsnh merged 1 commit into
mainfrom
chore/npm-oidc-publisher
May 13, 2026
Merged

chore: switch npm publish to OIDC trusted publisher and simplify code…#2
Qsnh merged 1 commit into
mainfrom
chore/npm-oidc-publisher

Conversation

@Qsnh

@Qsnh Qsnh commented May 13, 2026

Copy link
Copy Markdown
Contributor

…base

  • ci(release): drop long-lived NPM_TOKEN secret; rely on npm Trusted Publisher (OIDC) via id-token: write + npm@latest + npm publish
  • fix(package): drop "./" prefix from bin entry to silence publish warning
  • refactor(installer): fetch checksums-sha256.txt directly into memory instead of mkdtemp + downloadFile + readFile + rm dance
  • fix(download): cancel ReadableStream reader on error to avoid leak
  • refactor(platform): remove identity mapArch helper and simplify isMuslWith API to a thin pattern-free probe
  • refactor(providers): replace as ProviderSpec cast with explicit not-found throw and simplify buildEnv adapters to point-free style
  • chore: drop file-header path comments

…base

- ci(release): drop long-lived NPM_TOKEN secret; rely on npm Trusted
  Publisher (OIDC) via id-token: write + npm@latest + npm publish
- fix(package): drop "./" prefix from bin entry to silence publish warning
- refactor(installer): fetch checksums-sha256.txt directly into memory
  instead of mkdtemp + downloadFile + readFile + rm dance
- fix(download): cancel ReadableStream reader on error to avoid leak
- refactor(platform): remove identity mapArch helper and simplify
  isMuslWith API to a thin pattern-free probe
- refactor(providers): replace `as ProviderSpec` cast with explicit
  not-found throw and simplify buildEnv adapters to point-free style
- chore: drop file-header path comments
@Qsnh Qsnh merged commit a3ce62b into main May 13, 2026
3 checks passed
@Qsnh Qsnh deleted the chore/npm-oidc-publisher branch May 13, 2026 03:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant