@motir/cli 0.15.1 → 0.16.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/index.js +4810 -2066
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -636,7 +636,7 @@ tarball as a downloadable artifact without publishing.
|
|
|
636
636
|
**Auth:** the publish step uses **OIDC Trusted Publishing** — no `NPM_TOKEN`
|
|
637
637
|
secret. GitHub mints a short-lived id-token (`id-token: write`) that npm
|
|
638
638
|
exchanges for a one-time publish credential, gated by a Trusted Publisher
|
|
639
|
-
configured on npmjs.com for this package (org `
|
|
639
|
+
configured on npmjs.com for this package (org `motir-co` / repo `motir-core` /
|
|
640
640
|
this workflow filename). Provenance is still requested explicitly with
|
|
641
641
|
`--provenance`, which needs `id-token: write` plus the `repository` field in
|
|
642
642
|
`package.json`.
|