@pixpilot/scaffoldfy-configs 0.48.0 → 0.48.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
package/package.json
CHANGED
|
@@ -21,9 +21,13 @@ jobs:
|
|
|
21
21
|
permissions:
|
|
22
22
|
contents: write
|
|
23
23
|
pull-requests: write
|
|
24
|
-
#
|
|
25
|
-
#
|
|
24
|
+
# Packages publish to two registries (publishConfig.registry in each package.json):
|
|
25
|
+
# @pixpilot-private/* to GitHub Packages, authenticated with REGISTRY_TOKEN.
|
|
26
26
|
packages: write
|
|
27
|
+
# @pixpilot/* to npmjs via npm trusted publishing (OIDC). npm exchanges the
|
|
28
|
+
# OIDC token per package at publish time and falls back to REGISTRY_TOKEN
|
|
29
|
+
# for GitHub Packages, where the exchange is unsupported.
|
|
30
|
+
id-token: write
|
|
27
31
|
outputs:
|
|
28
32
|
published: ${{ steps.release.outputs.published }}
|
|
29
33
|
published-versions: ${{ steps.release.outputs.published-versions }}
|
|
@@ -60,10 +64,11 @@ jobs:
|
|
|
60
64
|
with:
|
|
61
65
|
GITHUB_TOKEN: ${{ steps.app_token.outputs.token }}
|
|
62
66
|
# GitHub Packages auth. Must be a token with write:packages on the
|
|
63
|
-
# package scope
|
|
64
|
-
# https://github.com/pixpilot-private
|
|
67
|
+
# package scope. npmjs packages authenticate via OIDC (id-token above),
|
|
68
|
+
# not this token. https://github.com/pixpilot-private
|
|
65
69
|
REGISTRY_TOKEN: ${{ secrets.PIXPILOT_PRIVATE_REGISTRY_TOKEN }}
|
|
66
|
-
# npm provenance
|
|
70
|
+
# npm provenance is unsupported on npm.pkg.github.com and for packages
|
|
71
|
+
# published from a private repository.
|
|
67
72
|
provenance: 'false'
|
|
68
73
|
|
|
69
74
|
notify:
|