@marcohefti/request-network-api-contracts 0.5.1 → 0.5.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Marco Hefti
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/docs/PUBLISHING.md

@@ -30,33 +30,45 @@ Use this checklist when preparing a release.
 - [ ] Tag strategy documented (e.g., `v0.x.y` for contract updates, semantic
       version bumps when contracts introduce breaking changes for SDKs).
 
-## Publishing Steps
+## Publishing Steps (Automated via GitHub Actions)
 
-1. Ensure you are logged into npm as `marcohefti` with publish access and 2FA enabled:
-   ```bash
-   npm login
-   ```
-2. From the contracts package root, run the verifier:
-   ```bash
-   npm run verify
-   ```
-3. Bump the version in `package.json` (following SemVer for the contracts line,
-   e.g., `0.5.1` for additive changes) and commit:
-   ```bash
-   git add package.json docs/UPDATES.md specs fixtures
-   git commit -m "chore(contracts): prepare @marcohefti/request-network-api-contracts@<version>"
-   ```
-4. Tag the commit and push branch + tag:
+Publishing is fully automated using GitHub Actions and OIDC trusted publishers. No npm tokens required.
+
+**To publish a new version:**
+
+1. Bump the version using npm:
    ```bash
-   git tag v<version>
-   git push
-   git push --tags
+   npm version patch   # for bug fixes (0.5.1 -> 0.5.2)
+   npm version minor   # for new features (0.5.1 -> 0.6.0)
+   npm version major   # for breaking changes (0.5.1 -> 1.0.0)
    ```
-5. Publish the package to npm:
+
+2. Push the tag to GitHub:
    ```bash
-   npm publish --access public --otp=<your_2fa_code>
+   git push --follow-tags
    ```
 
+3. GitHub Actions automatically:
+   - Verifies spec files exist (`node scripts/verify.js`)
+   - Publishes to npm using OIDC authentication
+   - Generates provenance attestations
+
+4. Verify the publish succeeded:
+   - Check GitHub Actions: https://github.com/marcohefti/request-network-api-contracts/actions
+   - Check npm: https://www.npmjs.com/package/@marcohefti/request-network-api-contracts
+
+**Prerequisites:**
+- Trusted publisher configured on npmjs.com (already set up)
+- Workflow file exists: `.github/workflows/publish.yml`
+- Repository uses npm 11.5.1+ in CI
+
+**Manual publish (emergency only):**
+If GitHub Actions is unavailable, you can publish manually:
+```bash
+npm login
+npm publish --access public
+```
+
 ## Post-Release
 
 - [ ] Update TypeScript and PHP clients (and any other SDKs) to depend on the

package/docs/UPDATES.md

@@ -12,4 +12,8 @@ change so SDK maintainers know when to regenerate code.
 -	**Notes:** Regeneration impact, required SDK updates, new fixtures
 
 ## History
-- *No entries yet* - initial import seeded via the TypeScript client’s `pnpm run prepare:spec` tooling on 2025-11-06.
+- **Date:** 2026-02-20
+- **Spec Version:** 2026-02-20 (`fetchedAt` from `request-network-openapi.meta.json`)
+- **Change Summary:** Synced upstream Request API OpenAPI spec; includes new `v2/payee-destination` operations and schema refinements consumed by TS/PHP clients.
+- **Source:** https://api.request.network/open-api/openapi.json
+- **Notes:** Requires regenerated SDK artifacts and parity checks in both `request-network-api-client-ts` and `request-network-api-client-php`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marcohefti/request-network-api-contracts",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "private": false,
   "description": "Shared contracts for Request Network API clients (OpenAPI spec, webhook fixtures).",
   "license": "MIT",