8000 fix(ci): publish to npm with provenance by styfle · Pull Request #672 · vercel/satori · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
/ satori Public
  • < 8000 a href="/login?return_to=%2Fvercel%2Fsatori" rel="nofollow" id="repository-details-watch-button" data-hydro-click="{"event_type":"authentication.click","payload":{"location_in_page":"notification subscription menu watch","repository_id":null,"auth_type":"LOG_IN","originating_url":"https://github.com/vercel/satori/pull/672","user_id":null}}" data-hydro-click-hmac="93ef821ec7ee6d7aeb7cb892af45b09046bed966fb5c7bce762087105a14474a" aria-label="You must be signed in to change notification settings" data-view-component="true" class="btn-sm btn"> Notifications You must be signed in to change notification settings
  • Fork 273
  • Star 11.8k

fix(ci): publish to npm with provenance #672

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
May 13, 2025
Merged

fix(ci): publish to npm with provenance #672

merged 1 commit into from
May 13, 2025

Conversation

styfle
Copy link
Member
@styfle styfle commented May 12, 2025 •
edited
Loading

@styfle styfle requested a review from shuding as a code owner May 12, 2025 17:24
@vercel Vercel
Copy link
vercel bot commented May 12, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
satori-playground ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 12, 2025 5:24pm

@styfle styfle mentioned this pull request May 12, 2025
Closed
@styfle styfle requested a review from Copilot May 12, 2025 17:24
Copilot
Copilot AI reviewed May 12, 2025
View reviewed changes
Copy link
@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR enables the publication of npm packages with provenance information by updating configuration files.

  • Enables provenance in npm by adding "provenance=true" in .npmrc
  • Updates the GitHub CI workflow with additional permissions, changes the node condition to use Node 20 for the release step, adds the NPM_CONFIG_PROVENANCE env variable, and upgrades semantic-release

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
.npmrc Adds the "provenance=true" setting to enable npm provenance
.github/workflows/ci.yml Updates permissions, adjusts node condition for release, and upgrades semantic-release with provenance configuration support

@styfle styfle requested a review from huozhi May 12, 2025 18:42
@styfle styfle changed the title fix: publish to npm provenance fix: publish to npm with provenance May 12, 2025
@styfle styfle changed the title fix: publish to npm with provenance fix(ci): publish to npm with provenance May 13, 2025
@styfle styfle merged commit aa7cdb6 into main May 13, 2025
16 checks passed
@styfle styfle deleted the styfle/NPM_CONFIG_PROVENANCE branch May 13, 2025 15:02
@github-actions GitHub Actions
Copy link

🎉 This PR is included in version 0.13.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

Copilot code review Copilot Copilot left review comments

@shuding shuding shuding approved these changes

@huozhi huozhi Awaiting requested review from huozhi

Assignees
No one assigned
Labels
released
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@styfle @shuding
0