@plasius/gpu-model-obj 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +6 -4
  2. package/package.json +3 -2
package/README.md CHANGED
@@ -35,8 +35,10 @@ Apache-2.0. See LICENSE, SECURITY.md, and the files under legal/.
35
35
  ## Release integrity
36
36
 
37
37
  CI keeps the administrative contributor registry outside Git and npm package
38
- artifacts using exact, case-normalised path checks. CI runs on approved
39
- self-hosted runners. Release preparation and npm publication use GitHub-hosted
40
- runners with Node.js 24.18.0 LTS. CD remains disabled until the npm trusted
41
- publisher binding is verified and the legacy token fallback is removed.
38
+ artifacts using exact, case-normalised path checks. CI runs on explicit
39
+ GitHub-hosted runners. Publication uses the GitHub-hosted `production` job with
40
+ Node 24 and a pinned npm 11.6.2 client. It is token-free and proceeds only while
41
+ the prepared SHA is the exact `main` head after successful push-triggered CI.
42
+ The completed `0.1.0` bootstrap path has been removed; subsequent releases must
43
+ use npm trusted publishing.
42
44
  <!-- END PLASIUS RELEASE INTEGRITY -->
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@plasius/gpu-model-obj",
3
- "version": "0.1.0",
3
+ "version": "0.1.2",
4
4
  "description": "OBJ and MTL import, export, triangulation, and explicit loss reports.",
5
5
  "type": "module",
6
6
  "sideEffects": false,
@@ -94,7 +94,8 @@
94
94
  }
95
95
  ],
96
96
  "overrides": {
97
- "brace-expansion": "5.0.8",
97
+ "nanoid": "3.3.18",
98
+ "brace-expansion": "5.0.9",
98
99
  "esbuild": "0.28.1",
99
100
  "minimatch": "^10.2.1",
100
101
  "postcss": "8.5.23"