@pixpilot/scaffoldfy-configs 0.48.0 → 0.48.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/CHANGELOG.md +12 -0
  2. package/package.json +3 -3
  3. package/pixpilot-changesets-release/release-github-packages.yml +10 -5
  4. package/workspace-package-generator/scaffoldfy-base.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,17 @@
1
1
  # @pixpilot/scaffoldfy-configs
2
2
 
3
+ ## 0.48.2
4
+
5
+ ### Patch Changes
6
+
7
+ - update bundler choice from `tsc` to `tsdown`
8
+
9
+ ## 0.48.1
10
+
11
+ ### Patch Changes
12
+
13
+ - adds id-token
14
+
3
15
  ## 0.48.0
4
16
 
5
17
  ### Minor Changes
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@pixpilot/scaffoldfy-configs",
3
3
  "type": "module",
4
- "version": "0.48.0",
4
+ "version": "0.48.2",
5
5
  "author": "PixPilot <m.doaie@hotmail.com>",
6
6
  "license": "MIT",
7
7
  "repository": {
@@ -31,9 +31,9 @@
31
31
  "eslint": "^9.38.0",
32
32
  "@internal/eslint-config": "0.3.0",
33
33
  "@internal/prettier-config": "0.0.1",
34
- "@internal/tsdown-config": "0.1.0",
35
34
  "@internal/vitest-config": "0.1.0",
36
- "@pixpilot/scaffoldfy": "0.58.0"
35
+ "@pixpilot/scaffoldfy": "0.58.0",
36
+ "@internal/tsdown-config": "0.1.0"
37
37
  },
38
38
  "prettier": "@internal/prettier-config",
39
39
  "publishConfig": {
package/pixpilot-changesets-release/release-github-packages.yml CHANGED
@@ -21,9 +21,13 @@ jobs:
21
21
  permissions:
22
22
  contents: write
23
23
  pull-requests: write
24
- # Publishing targets GitHub Packages (publishConfig.registry in each package.json),
25
- # which authenticates with a token rather than npm OIDC trusted publishing.
24
+ # Packages publish to two registries (publishConfig.registry in each package.json):
25
+ # @pixpilot-private/* to GitHub Packages, authenticated with REGISTRY_TOKEN.
26
26
  packages: write
27
+ # @pixpilot/* to npmjs via npm trusted publishing (OIDC). npm exchanges the
28
+ # OIDC token per package at publish time and falls back to REGISTRY_TOKEN
29
+ # for GitHub Packages, where the exchange is unsupported.
30
+ id-token: write
27
31
  outputs:
28
32
  published: ${{ steps.release.outputs.published }}
29
33
  published-versions: ${{ steps.release.outputs.published-versions }}
@@ -60,10 +64,11 @@ jobs:
60
64
  with:
61
65
  GITHUB_TOKEN: ${{ steps.app_token.outputs.token }}
62
66
  # GitHub Packages auth. Must be a token with write:packages on the
63
- # package scope; npm OIDC trusted publishing is npmjs-only.
64
- # https://github.com/pixpilot-private
67
+ # package scope. npmjs packages authenticate via OIDC (id-token above),
68
+ # not this token. https://github.com/pixpilot-private
65
69
  REGISTRY_TOKEN: ${{ secrets.PIXPILOT_PRIVATE_REGISTRY_TOKEN }}
66
- # npm provenance attestation is not supported by npm.pkg.github.com.
70
+ # npm provenance is unsupported on npm.pkg.github.com and for packages
71
+ # published from a private repository.
67
72
  provenance: 'false'
68
73
 
69
74
  notify:
package/workspace-package-generator/scaffoldfy-base.json CHANGED
@@ -152,7 +152,7 @@
152
152
  "type": "select",
153
153
  "message": "Select a bundler for this package",
154
154
  "choices": [
155
- { "name": "TypeScript Compiler (tsc)", "value": "tsc" },
155
+ { "name": "TypeScript Compiler (tsc)", "value": "tsdown" },
156
156
  { "name": "tsdown", "value": "tsdown" }
157
157
  ],
158
158
  "default": "tsc",