@klhapp/skillmux 1.4.0 → 1.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +7 -0
- package/docs/releasing.md +9 -2
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,13 @@ All notable changes to this project are documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [1.4.1](https://github.com/klhq/skillmux/compare/v1.4.0...v1.4.1) (2026-08-04)
|
|
9
|
+
|
|
10
|
+
|
|
11
|
+
### Fixed
|
|
12
|
+
|
|
13
|
+
* **ci:** publish npm package to GitHub Packages ([#110](https://github.com/klhq/skillmux/issues/110)) ([5de37f2](https://github.com/klhq/skillmux/commit/5de37f22a658187cd270743b24237844513c1e54))
|
|
14
|
+
|
|
8
15
|
## [1.4.0](https://github.com/klhq/skillmux/compare/v1.3.4...v1.4.0) (2026-08-04)
|
|
9
16
|
|
|
10
17
|
|
package/docs/releasing.md
CHANGED
|
@@ -35,6 +35,8 @@ accidentally republish an existing npm version.
|
|
|
35
35
|
|
|
36
36
|
The release workflow publishes:
|
|
37
37
|
|
|
38
|
+
- `@klhapp/skillmux` to the public npm registry
|
|
39
|
+
- `@klhq/skillmux` to GitHub Packages, linked to this repository
|
|
38
40
|
- `skillmux-linux-amd64`
|
|
39
41
|
- `skillmux-linux-arm64`
|
|
40
42
|
- SHA-256 digests for the Linux binaries in the GitHub Release asset metadata
|
|
@@ -70,8 +72,13 @@ The `production-release` GitHub environment provides the
|
|
|
70
72
|
`DOCKERHUB_USERNAME` variable and `DOCKERHUB_TOKEN` secret. The npm job also
|
|
71
73
|
uses this environment as its Trusted Publisher identity; configure npm with
|
|
72
74
|
workflow `release-please.yml` and environment `production-release`. No
|
|
73
|
-
long-lived npm token is required. GitHub Packages uses the workflow's
|
|
74
|
-
`GITHUB_TOKEN
|
|
75
|
+
long-lived npm token is required. The GitHub Packages job uses the workflow's
|
|
76
|
+
scoped `GITHUB_TOKEN` and changes only its runner-local package name to
|
|
77
|
+
`@klhq/skillmux`; the source package remains `@klhapp/skillmux` for npmjs.
|
|
78
|
+
|
|
79
|
+
GitHub initially creates npm packages with private visibility. After the first
|
|
80
|
+
release, open the `@klhq/skillmux` package settings and make it public if it
|
|
81
|
+
should be visible outside the organization.
|
|
75
82
|
Private repositories still publish BuildKit SBOM/provenance with container
|
|
76
83
|
images, but GitHub artifact attestations are skipped because GitHub does not
|
|
77
84
|
support them for user-owned private repositories.
|
package/package.json
CHANGED