@imix-js/taproot 0.8.4 → 0.8.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/docs/release/tokens.md +77 -0
- package/package.json +1 -1
|
@@ -0,0 +1,77 @@
|
|
|
1
|
+
# Release Tokens
|
|
2
|
+
|
|
3
|
+
Tokens required to cut a taproot release. All expire — rotate before they block CI.
|
|
4
|
+
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
## NPM_TOKEN
|
|
8
|
+
|
|
9
|
+
**Purpose:** Publish `@imix-js/taproot` to npm with provenance
|
|
10
|
+
**Used by:** `publish` CI job (`release.yml`)
|
|
11
|
+
**Scope:** `Automation` token type, `Read and write` package access
|
|
12
|
+
**Expiry:** Set at creation (recommend 1 year)
|
|
13
|
+
|
|
14
|
+
**Create / rotate:**
|
|
15
|
+
1. https://www.npmjs.com/settings/~/tokens
|
|
16
|
+
2. Generate New Token → **Granular Access Token**
|
|
17
|
+
3. Packages: `@imix-js/taproot` → Read and write
|
|
18
|
+
4. Add to repo: https://github.com/imix/taproot/settings/secrets/actions → `NPM_TOKEN`
|
|
19
|
+
|
|
20
|
+
---
|
|
21
|
+
|
|
22
|
+
## HOMEBREW_TAP_TOKEN
|
|
23
|
+
|
|
24
|
+
**Purpose:** Push formula updates to `imix/homebrew-tap` after each release
|
|
25
|
+
**Used by:** `update-homebrew-tap` CI job (`release.yml`)
|
|
26
|
+
**Scope:** Fine-grained PAT — `imix/homebrew-tap` → Contents: Read and write
|
|
27
|
+
**Expiry:** Set at creation (recommend 1 year)
|
|
28
|
+
|
|
29
|
+
**Create / rotate:**
|
|
30
|
+
1. https://github.com/settings/personal-access-tokens/new
|
|
31
|
+
2. Resource owner: `imix`
|
|
32
|
+
3. Repository access: Only `imix/homebrew-tap`
|
|
33
|
+
4. Permissions: Contents → Read and write
|
|
34
|
+
5. Add to repo: https://github.com/imix/taproot/settings/secrets/actions → `HOMEBREW_TAP_TOKEN`
|
|
35
|
+
|
|
36
|
+
---
|
|
37
|
+
|
|
38
|
+
## VSCE_PAT
|
|
39
|
+
|
|
40
|
+
**Purpose:** Publish VS Code extension to VS Code Marketplace
|
|
41
|
+
**Used by:** `publish-vscode-extension` CI job (`release.yml`)
|
|
42
|
+
**Scope:** Azure DevOps PAT — Marketplace: Manage
|
|
43
|
+
**Expiry:** Set at creation (max 1 year)
|
|
44
|
+
**Publisher:** `imix-ai` at https://marketplace.visualstudio.com/manage/publishers/imix-ai
|
|
45
|
+
|
|
46
|
+
**Create / rotate:**
|
|
47
|
+
1. https://dev.azure.com → User Settings → Personal Access Tokens
|
|
48
|
+
2. New Token → Custom defined → Marketplace: Manage
|
|
49
|
+
3. Add to repo: https://github.com/imix/taproot/settings/secrets/actions → `VSCE_PAT`
|
|
50
|
+
|
|
51
|
+
---
|
|
52
|
+
|
|
53
|
+
## OVSX_PAT
|
|
54
|
+
|
|
55
|
+
**Purpose:** Publish VS Code extension to Open VSX (optional — non-blocking)
|
|
56
|
+
**Used by:** `publish-vscode-extension` CI job (`release.yml`)
|
|
57
|
+
**Scope:** Open VSX namespace token
|
|
58
|
+
**Expiry:** Varies
|
|
59
|
+
|
|
60
|
+
**Create / rotate:**
|
|
61
|
+
1. https://open-vsx.org → Sign in → Settings → Access Tokens
|
|
62
|
+
2. Add to repo: https://github.com/imix/taproot/settings/secrets/actions → `OVSX_PAT`
|
|
63
|
+
|
|
64
|
+
---
|
|
65
|
+
|
|
66
|
+
## GITHUB_TOKEN
|
|
67
|
+
|
|
68
|
+
**Purpose:** Create GitHub releases
|
|
69
|
+
**Used by:** `publish` CI job (`release.yml`)
|
|
70
|
+
**Scope:** Auto-provided by GitHub Actions — no rotation needed
|
|
71
|
+
|
|
72
|
+
---
|
|
73
|
+
|
|
74
|
+
## Secrets dashboard
|
|
75
|
+
|
|
76
|
+
All secrets in one place:
|
|
77
|
+
https://github.com/imix/taproot/settings/secrets/actions
|