@particle-academy/youtube-js 0.2.1 → 0.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +24 -0
  2. package/package.json +3 -2
package/CHANGELOG.md CHANGED
@@ -4,6 +4,30 @@ All notable changes to `@particle-academy/youtube-ui`,
4
4
  `@particle-academy/youtube-js`, `particle-academy/youtube-php` and
5
5
  `fancy-youtube`.
6
6
 
7
+ ## [0.2.2] — 2026-09-06
8
+
9
+ ### Changed
10
+
11
+ - **Published through npm Trusted Publishing, so these packages now carry PROVENANCE.**
12
+
13
+ Every earlier release went out under a scope-wide npm token. This one is
14
+ published by an OIDC exchange from the release workflow itself, and npm records
15
+ which workflow in which repository built it.
16
+ `npm view @particle-academy/youtube-ui@0.2.2` shows the attestation; releases before
17
+ this one have none.
18
+
19
+ What it buys a consumer: the tarball on the registry can be tied to a public
20
+ commit and a public workflow run, rather than to whoever held a token. What it
21
+ does not buy: nothing about the code changed, and the runtime behaviour of all
22
+ four packages is identical to 0.2.1.
23
+
24
+ - **`repository.directory` in the npm packages.**
25
+
26
+ `@particle-academy/youtube-ui` and `@particle-academy/youtube-js` live at
27
+ `packages/ui` and `packages/js` inside the provider repo. npm's `repository`
28
+ field now says so, which makes the "Repository" link on each package page point
29
+ at the package rather than at the repository root.
30
+
7
31
  ## [0.2.1] — 2026-08-24
8
32
 
9
33
  ### Fixed
package/package.json CHANGED
@@ -1,10 +1,11 @@
1
1
  {
2
2
  "name": "@particle-academy/youtube-js",
3
- "version": "0.2.1",
3
+ "version": "0.2.2",
4
4
  "description": "YouTube for Node — the service descriptor, its faker, its webhook verification, and one function per operation. Plain HTTP on @particle-academy/fancy-connector-core; no vendor SDK.",
5
5
  "repository": {
6
6
  "type": "git",
7
- "url": "git+https://github.com/Fancy-Friends/youtube.git"
7
+ "url": "git+https://github.com/Fancy-Friends/youtube.git",
8
+ "directory": "packages/js"
8
9
  },
9
10
  "homepage": "https://github.com/Fancy-Friends/youtube#readme",
10
11
  "bugs": "https://github.com/Fancy-Friends/youtube/issues",