@programinglive/commiter 1.2.8 → 1.2.16

package/.github/workflows/publish.yml

@@ -19,8 +19,13 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '18'
-          registry-url: 'https://registry.npmjs.org'
+          node-version: '20'
+
+      - name: Update npm and configure registry
+        run: |
+          npm install -g npm@latest
+          npm config set registry https://registry.npmjs.org/
+          npm config set //registry.npmjs.org/:_authToken ""
 
       - name: Install dependencies
         run: npm ci
@@ -29,6 +34,4 @@ jobs:
         run: npm test
 
       - name: Publish to NPM
-        run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.COMMITER_TOKEN }}
+        run: npm publish --provenance --access public

package/CHANGELOG.md

@@ -2,6 +2,80 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [1.2.16](https://github.com/programinglive/commiter/compare/v1.2.15...v1.2.16) (2025-12-13)
+
+
+### 👷 Continuous Integration
+
+* upgrade to node 20 and update npm for OIDC ([5f7d9a0](https://github.com/programinglive/commiter/commit/5f7d9a0d668ab5702879841de2f9d0818fa8f6bd))
+
+### [1.2.15](https://github.com/programinglive/commiter/compare/v1.2.14...v1.2.15) (2025-12-13)
+
+
+### 👷 Continuous Integration
+
+* remove registry-url to fix OIDC auth conflict ([c49b6e8](https://github.com/programinglive/commiter/commit/c49b6e81195c5b9dc40611ee87fd22d45c33e3a9))
+
+### [1.2.14](https://github.com/programinglive/commiter/compare/v1.2.13...v1.2.14) (2025-12-13)
+
+
+### 👷 Continuous Integration
+
+* remove legacy auth token env ([8508deb](https://github.com/programinglive/commiter/commit/8508deb5ee725519848588780d897f03fdb725eb))
+
+### [1.2.13](https://github.com/programinglive/commiter/compare/v1.2.12...v1.2.13) (2025-12-13)
+
+
+### 👷 Continuous Integration
+
+* enable npm trusted publishing (OIDC) with provenance ([5e1e852](https://github.com/programinglive/commiter/commit/5e1e852abfa6860e7e1533895ebf3f2996a11bfb))
+
+### [1.2.12](https://github.com/programinglive/commiter/compare/v1.2.10...v1.2.12) (2025-12-13)
+
+
+### 🧹 Chores
+
+* cleanup and add deployment scripts ([4124b5f](https://github.com/programinglive/commiter/commit/4124b5fc25f2975a62cccbfb3fa168c54e0058bf))
+* **release:** 1.2.11 🚀 ([2bbf62a](https://github.com/programinglive/commiter/commit/2bbf62a569546e06a7c27f0a2ecae838493161c6))
+
+
+### 🐛 Bug Fixes
+
+* resolve npm pkg warnings ([6d7a193](https://github.com/programinglive/commiter/commit/6d7a1937d70e6cf2f69edd6c7def8deba7a732d7))
+* **setup:** surface first release commands ([8701e9a](https://github.com/programinglive/commiter/commit/8701e9ae75fde65f55ab956e0636bcff6c0672a9))
+
+### [1.2.11](https://github.com/programinglive/commiter/compare/v1.2.10...v1.2.11) (2025-12-11)
+
+
+### 🧹 Chores
+
+* cleanup and add deployment scripts ([4124b5f](https://github.com/programinglive/commiter/commit/4124b5fc25f2975a62cccbfb3fa168c54e0058bf))
+
+
+### 🐛 Bug Fixes
+
+* **setup:** surface first release commands ([8701e9a](https://github.com/programinglive/commiter/commit/8701e9ae75fde65f55ab956e0636bcff6c0672a9))
+
+### [1.2.10](https://github.com/programinglive/commiter/compare/v1.2.9...v1.2.10) (2025-12-11)
+
+
+### ✨ Features
+
+* enhance release workflow with first release support and patch defaults ([d5f1334](https://github.com/programinglive/commiter/commit/d5f133425718eab44fd9d8cdc4fc50641697efd0))
+
+### [1.2.9](https://github.com/programinglive/commiter/compare/v1.2.8...v1.2.9) (2025-12-05)
+
+
+### 🧹 Chores
+
+* add release:first script ([0240fce](https://github.com/programinglive/commiter/commit/0240fceaaad231074f1525b9d5208697cfa9d5fa))
+* update gitignore and release notes ([c12f935](https://github.com/programinglive/commiter/commit/c12f935aaeb56b412fdefdc888acea544bc83e3b))
+
+
+### 📝 Documentation
+
+* document release:first command and update tests ([876a208](https://github.com/programinglive/commiter/commit/876a20893a6a1fd3433992ba62d62ed6bd09c0b0))
+
 ### [1.2.8](https://github.com/programinglive/commiter/compare/v1.2.6...v1.2.8) (2025-12-02)
 
 

package/PRD.md

@@ -21,13 +21,14 @@ Growing teams often struggle to keep release processes consistent: commit messag
 ## 5. Key Features
 - **Setup CLI (`index.js`)**
   - Installs dev dependencies (`standard-version`, `commitlint`, `husky`).
-  - Configures package scripts (`npm run release`, `release:major/minor/patch`).
+  - Configures package scripts (`npm run release`, `release:major/minor/patch`, `release:first`).
   - Creates Husky hooks and commitlint configuration.
   - Generates release helper script and ensures executable permissions (POSIX-friendly).
 - **Release Helper (`scripts/release.js`)**
   - Detects release type from CLI args or npm context.
   - Runs project tests via detected package manager before releasing.
   - Invokes `standard-version`, passing the preload script via `NODE_OPTIONS`.
+  - Supports first release mode that sets version to 0.0.1 for new projects.
   - Stays focused on repository assets only (website updates are intentionally manual to avoid cross-project impacts).
 - **Preload Patching (`scripts/preload/fs-f-ok.cjs`)**
   - Hooks Node’s module loader to transparently replace deprecated `fs.F_OK` usages in `standard-version` without altering `node_modules`.
@@ -59,11 +60,15 @@ Growing teams often struggle to keep release processes consistent: commit messag
    - Run `npx @programinglive/commiter`.
    - Tool installs dependencies, updates `package.json`, and scaffolds Husky hooks.
    - Maintainer confirms success message and new scripts.
-2. **Standard Release**
-   - Developer runs `npm run release minor`.
+2. **First Release**
+   - Developer runs `npm run release:first` for new projects.
+   - Commiter sets version to 0.0.1, runs tests, creates initial changelog and git tag.
+   - Project foundation established with proper semantic versioning.
+3. **Standard Release**
+   - Developer runs `npm run release minor` or `npm run release` (defaults to patch).
    - Commiter runs tests, ensures preload patch prevents deprecation warnings, executes `standard-version`.
    - Release completes with updated changelog and git tag.
-3. **CI Pipeline**
+4. **CI Pipeline**
    - CI job executes `npm run release -- --prerelease beta`.
    - Logs show tests executed, no deprecation warnings, and release artifacts generated.
 

package/README.md

@@ -168,15 +168,21 @@ Valid types: `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `build`
 
 Release commits generated by `standard-version` such as `chore(release): 1.0.0 🚀` are automatically ignored by `commitlint`.
 
-### First release
+### First Release
 
-If this is your first release and you don't have a version tag yet:
+For new projects without any version tags, use the first release command to start from version 0.0.1:
 
 ```bash
-npm run release -- --first-release
+npm run release:first
 ```
 
-Running the setup command ensures the default `npm test` script is `echo "No tests specified"`, preventing the Husky `pre-commit` hook from failing during this initial release. Replace it with your real test command once available.
+Running the first release command:
+- Sets the initial version to **0.0.1**
+- Creates the first git tag
+- Generates the initial CHANGELOG.md
+- Commits the release with proper formatting
+
+This ensures your project starts with a clean, semantic version foundation. Replace the default test script with your real test command once available.
 
 ### Dry run
 

package/docs/release-notes/RELEASE_NOTES.md

@@ -4,6 +4,14 @@ This document summarizes every published version of `@programinglive/commiter`.
 
 | Version | Date | Highlights |
 |---------|------|------------|
+| 1.2.16 | 2025-12-13 | upgrade to node 20 and update npm for OIDC (5f7d9a0) |
+| 1.2.15 | 2025-12-13 | remove registry-url to fix OIDC auth conflict (c49b6e8) |
+| 1.2.14 | 2025-12-13 | remove legacy auth token env (8508deb) |
+| 1.2.13 | 2025-12-13 | enable npm trusted publishing (OIDC) with provenance (5e1e852) |
+| 1.2.12 | 2025-12-13 | cleanup and add deployment scripts (4124b5f) |
+| 1.2.11 | 2025-12-11 | cleanup and add deployment scripts (4124b5f) |
+| 1.2.10 | 2025-12-11 | enhance release workflow with first release support and patch defaults (d5f1334) |
+| 1.2.9 | 2025-12-05 | add release:first script (0240fce) |
 | 1.2.8 | 2025-12-02 | remove website auto updates (c6f2498) |
 | 1.2.7 | 2025-12-02 | remove website auto updates (c6f2498) |
 | 1.2.6 | 2025-11-30 | tests only run during release, not on commit (15600a0) |
@@ -58,6 +66,68 @@ This document summarizes every published version of `@programinglive/commiter`.
 
 
 
+
+
+
+
+
+
+
+
+## 1.2.16 – 👷 Continuous Integration
+
+Released on **2025-12-13**.
+
+- upgrade to node 20 and update npm for OIDC (5f7d9a0)
+
+## 1.2.15 – 👷 Continuous Integration
+
+Released on **2025-12-13**.
+
+- remove registry-url to fix OIDC auth conflict (c49b6e8)
+
+## 1.2.14 – 👷 Continuous Integration
+
+Released on **2025-12-13**.
+
+- remove legacy auth token env (8508deb)
+
+## 1.2.13 – 👷 Continuous Integration
+
+Released on **2025-12-13**.
+
+- enable npm trusted publishing (OIDC) with provenance (5e1e852)
+
+## 1.2.12 – 🧹 Chores
+
+Released on **2025-12-13**.
+
+- cleanup and add deployment scripts (4124b5f)
+- **release:** 1.2.11 🚀 (2bbf62a)
+- resolve npm pkg warnings (6d7a193)
+- **setup:** surface first release commands (8701e9a)
+
+## 1.2.11 – 🧹 Chores
+
+Released on **2025-12-11**.
+
+- cleanup and add deployment scripts (4124b5f)
+- **setup:** surface first release commands (8701e9a)
+
+## 1.2.10 – ✨ Features
+
+Released on **2025-12-11**.
+
+- enhance release workflow with first release support and patch defaults (d5f1334)
+
+## 1.2.9 – 🧹 Chores
+
+Released on **2025-12-05**.
+
+- add release:first script (0240fce)
+- update gitignore and release notes (c12f935)
+- document release:first command and update tests (876a208)
+
 ## 1.2.8 – ♻️ Refactors
 
 Released on **2025-12-02**.

package/index.js

@@ -63,6 +63,7 @@ function setupCommiter() {
     packageJson.scripts['release:major'] = 'node scripts/release.cjs major';
     packageJson.scripts['release:minor'] = 'node scripts/release.cjs minor';
     packageJson.scripts['release:patch'] = 'node scripts/release.cjs patch';
+    packageJson.scripts['release:first'] = 'node scripts/release.cjs --first-release';
 
     // Add standard-version config
     packageJson['standard-version'] = {
@@ -174,10 +175,12 @@ npx --no -- commitlint --edit "$1"
 
     console.log('\n✅ Commiter setup complete!\n');
     console.log('📚 Available commands:');
-    console.log('  npm run release major  - Create a major release (1.0.0 → 2.0.0)');
-    console.log('  npm run release minor  - Create a minor release (1.0.0 → 1.1.0)');
-    console.log('  npm run release patch  - Create a patch release (1.0.0 → 1.0.1)');
-    console.log('  npm run release        - Auto-detect version bump');
+    console.log('  npm run release major        - Create a major release (1.0.0 → 2.0.0)');
+    console.log('  npm run release minor        - Create a minor release (1.0.0 → 1.1.0)');
+    console.log('  npm run release patch        - Create a patch release (1.0.0 → 1.0.1)');
+    console.log('  npm run release              - Auto-detect version bump');
+    console.log('  npm run release:first        - Initialize the first release at 0.0.1');
+    console.log('  npm run release -- --first   - Alternative first release flag (0.0.1 start)');
     console.log('  npm run release -- --prerelease beta  - Create a beta prerelease\n');
     console.log('🎯 Commit format: type(scope): subject');
     console.log('   Example: feat(auth): add user login\n');

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@programinglive/commiter",
-  "version": "1.2.8",
+  "version": "1.2.16",
   "description": "Commiter keeps repositories release-ready by enforcing conventional commits, generating icon-rich changelog entries, and orchestrating semantic version bumps without manual toil. It bootstraps Husky hooks, commitlint rules, and release scripts that inspect history, detect framework-specific test commands, run them automatically, tag git releases, coordinate npm publishing, surface release metrics, enforce project-specific checks, and give maintainers observability across distributed teams. Plus!",
   "main": "index.js",
   "bin": {
-    "commiter": "./index.js"
+    "commiter": "index.js"
   },
   "scripts": {
     "test": "node --test",
@@ -13,6 +13,7 @@
     "release:major": "node scripts/release.cjs major",
     "release:minor": "node scripts/release.cjs minor",
     "release:patch": "node scripts/release.cjs patch",
+    "release:first": "node scripts/release.cjs --first-release",
     "web": "npx serve web"
   },
   "keywords": [

package/scripts/release.cjs

@@ -26,18 +26,18 @@ const SEMVER_REGEX = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
 const LOCKFILE_PREFERENCES = [
   { manager: 'pnpm', file: 'pnpm-lock.yaml' },
   { manager: 'yarn', file: 'yarn.lock' },
-  { manager: 'bun', file: 'bun.lockb' },
+  { manager: 'bun', file: 'bun.lock' },
   { manager: 'npm', file: 'package-lock.json' }
 ];
 
 function getCliArguments(argv = process.argv) {
   const rawArgs = argv.slice(2);
   if (rawArgs.length === 0) {
-    return { releaseType: undefined, extraArgs: [] };
+    return { releaseType: 'patch', extraArgs: [] };
   }
 
   if (rawArgs[0].startsWith('-')) {
-    return { releaseType: undefined, extraArgs: rawArgs };
+    return { releaseType: 'patch', extraArgs: rawArgs };
   }
 
   const [firstArg, ...rest] = rawArgs;
@@ -60,7 +60,14 @@ function getNpmRunArgument(env = process.env) {
 
 function buildStandardVersionArgs({ releaseType, extraArgs }) {
   const args = [];
-  if (releaseType) {
+  
+  // Handle --first-release flag
+  const isFirstRelease = Array.isArray(extraArgs) && extraArgs.includes('--first-release');
+  if (isFirstRelease) {
+    args.push('--release-as', '0.0.1');
+    // Remove --first-release from extraArgs to avoid passing it to standard-version
+    extraArgs = extraArgs.filter(arg => arg !== '--first-release');
+  } else if (releaseType) {
     const normalized = releaseType.trim();
     const isValid = VALID_RELEASE_TYPES.has(normalized) || SEMVER_REGEX.test(normalized);
     if (!isValid) {

package/web/index.html

@@ -275,6 +275,9 @@
                     <div class="step-content">
                         <h3>Release Your Changes</h3>
                         <p>Run the appropriate release command based on your changes</p>
+                        <div class="code-block">
+                            <code>npm run release:first   # New project → 0.0.1</code>
+                        </div>
                         <div class="code-block">
                             <code>npm run release:patch  # 1.0.0 → 1.0.1</code>
                         </div>