@north-light/crouter-api 0.3.271 → 0.3.274

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +11 -3
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -46,6 +46,14 @@ autostart hook.
46
46
 
47
47
  The source lives in the [`crouter`](https://github.com/vallum-security/crouter)
48
48
  repo at `src/api/`; this package is a build-and-publish mirror of that subtree
49
- (it carries no source of its own). It is published by the `publish-api.yml`
50
- GitHub Action when a tag matching `api-vX.Y.Z` is pushed the tag version must
51
- match this package's `version`.
49
+ (it carries no source of its own). It is published by the `publish-api` job of
50
+ the `publish.yml` GitHub Action, in lockstep with `@north-light/crouter`: every
51
+ push to `main` bumps both to the same patch version and publishes both from the
52
+ same release commit.
53
+
54
+ To publish this package alone — a contract-only release, or a retry — run the
55
+ `Publish` workflow by hand with an `api_ref` naming the tag or sha to build. The
56
+ ref's version must match this package's `version`. It cannot live in its own
57
+ workflow file: npm's trusted publishing validates the workflow file the run
58
+ started in, so a second workflow would present a name no registration matches
59
+ and get no publish credential.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@north-light/crouter-api",
3
- "version": "0.3.271",
3
+ "version": "0.3.274",
4
4
  "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, and the CrtrClient. Zero runtime dependencies.",
5
5
  "type": "module",
6
6
  "main": "./dist/api/index.js",