@casomoltd/tooling 0.24.2 → 0.25.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -4
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -403,7 +403,12 @@ only and on explicit request; the agents never do it.
|
|
|
403
403
|
(`@casomoltd/paye-calc`, `@casomoltd/nhs-pay`), publishes to the public
|
|
404
404
|
npm registry via OIDC trusted publishing — install with no auth or
|
|
405
405
|
`.npmrc`. A version-tag push (`npm version patch` → `git push
|
|
406
|
-
--follow-tags`) triggers `publish.yml`. That workflow
|
|
407
|
-
|
|
408
|
-
|
|
409
|
-
|
|
406
|
+
--follow-tags`) triggers `publish.yml`. That workflow carries **no npm
|
|
407
|
+
pin**: it builds on Node 24, whose bundled npm 11.x is already the range
|
|
408
|
+
we want — at or above the `npm >= 11.5.1` trusted publishing needs, and
|
|
409
|
+
short of npm 12, which still refuses non-registry fetches by default
|
|
410
|
+
(`EALLOWREMOTE`) and so cannot regenerate a lockfile that resolves a
|
|
411
|
+
transitive remote tarball. The other two npm 12.0.0 regressions this
|
|
412
|
+
once guarded against are fixed: `npm ci` strictness (12.0.2 installs
|
|
413
|
+
Linux-generated locks cleanly) and the provenance/sigstore crash
|
|
414
|
+
(12.0.1). Re-test the fetch block before moving to npm 12.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@casomoltd/tooling",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.25.0",
|
|
4
4
|
"description": "Casomo's shared dev config: ESLint, Prettier, commitlint, knip & jscpd presets and dev CLIs (git hooks, readability, screenshots)",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
@@ -23,7 +23,7 @@
|
|
|
23
23
|
"check": "node bin/check-gates.mjs && node bin/verify-pack.mjs && npm run check:private-refs && npm run typecheck && npm run test && npm run lint:md",
|
|
24
24
|
"typecheck": "tsc --noEmit -p hooks/tsconfig.json",
|
|
25
25
|
"test": "node hooks/test.mts && node bin/check-gates.test.mjs",
|
|
26
|
-
"lint:md": "remark --frail --quiet --no-stdout --rc-path bin/skills-lint.config.mjs skills docs",
|
|
26
|
+
"lint:md": "remark --frail --quiet --no-stdout --rc-path bin/skills-lint.config.mjs skills agents docs",
|
|
27
27
|
"build": "echo 'no-op: source-only repo, nothing to build'",
|
|
28
28
|
"prepare": "husky || true",
|
|
29
29
|
"check:private-refs": "node bin/check-private-refs.mjs"
|