@duboseweb/motus 1.0.0 → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +0 -30
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -318,36 +318,6 @@ npm run test:pack # pack, install into a throwaway project, assert it works
|
|
|
318
318
|
npm run check:pkg # publint + are-the-types-wrong
|
|
319
319
|
```
|
|
320
320
|
|
|
321
|
-
### Releasing
|
|
322
|
-
|
|
323
|
-
Publishing runs from CI on a version tag, using npm
|
|
324
|
-
[trusted publishing](https://docs.npmjs.com/trusted-publishers) — there is no npm token stored
|
|
325
|
-
anywhere, and npm generates a provenance attestation automatically, linking the published tarball
|
|
326
|
-
to the exact commit and workflow that built it.
|
|
327
|
-
|
|
328
|
-
Work lands on `develop`. `main` is protected and takes pull requests only, so the version bump is
|
|
329
|
-
made on `develop` and the tag is cut from `main` after the merge:
|
|
330
|
-
|
|
331
|
-
```sh
|
|
332
|
-
# on develop — bump the version without tagging yet
|
|
333
|
-
npm version patch --no-git-tag-version # or minor / major
|
|
334
|
-
git commit -am "Release v1.0.1"
|
|
335
|
-
git push
|
|
336
|
-
|
|
337
|
-
# open a pull request from develop to main and merge it
|
|
338
|
-
|
|
339
|
-
git checkout main && git pull
|
|
340
|
-
git tag v1.0.1
|
|
341
|
-
git push origin v1.0.1 # this is what triggers the release
|
|
342
|
-
```
|
|
343
|
-
|
|
344
|
-
Tags are not covered by the branch protection, so the final push is what starts the publish.
|
|
345
|
-
|
|
346
|
-
The workflow refuses to publish if the tagged commit is not reachable from `main`, or if the tag
|
|
347
|
-
and `package.json` disagree. It fails loudly rather than skipping, so a release that did not happen
|
|
348
|
-
is never mistaken for one that did. `prepublishOnly` then runs lint, typecheck, tests, the build,
|
|
349
|
-
`check:pkg` and the package smoke test before anything reaches the registry.
|
|
350
|
-
|
|
351
321
|
---
|
|
352
322
|
|
|
353
323
|
## License
|