Skip to content

Harden npm release workflow#2

Merged
mattbaconz merged 1 commit into
mainfrom
codex/release-publish-hardening
May 9, 2026
Merged

Harden npm release workflow#2
mattbaconz merged 1 commit into
mainfrom
codex/release-publish-hardening

Conversation

@mattbaconz
Copy link
Copy Markdown
Owner

Summary

  • harden manual npm release workflow for trusted publishing requirements
  • document Node/npm prerequisites, trusted publisher values, and E404 bootstrap constraint
  • require typed publish confirmation before any publish step

Verification

  • pnpm install --frozen-lockfile
  • pnpm test
  • pnpm typecheck
  • pnpm lint
  • pnpm build
  • pnpm verify:packed
  • npm pack --dry-run --json

No npm publish command was run.

@mattbaconz mattbaconz merged commit 0c02f7c into main May 9, 2026
1 check passed
@mattbaconz mattbaconz deleted the codex/release-publish-hardening branch May 9, 2026 05:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant