@rightkit/git 0.2.15 → 0.2.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/manifest.mjs CHANGED
@@ -657,6 +657,7 @@ ${pm.setup}
657
657
  - name: Run installed-artifact qualification
658
658
  run: ${pm.runPrefix} ${chain.installedQualificationScript}
659
659
  env:
660
+ GH_TOKEN: \${{ github.token }}
660
661
  RIGHT_GIT_FINALIZED_WINDOWS_ROOT: \${{ runner.temp }}/right-git-release/windows
661
662
  RIGHT_GIT_QUALIFICATION_EVIDENCE_ROOT: \${{ runner.temp }}/right-git-release/qualification
662
663
  RIGHT_GIT_SOURCE_REVISION: \${{ env.RIGHT_GIT_SOURCE_REVISION }}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rightkit/git",
3
- "version": "0.2.15",
3
+ "version": "0.2.16",
4
4
  "description": "Public-repo-only GitHub Actions workflow layer: templates, visibility gate, sync/drift/adopt/uninstall for right-git.",
5
5
  "license": "MIT OR Apache-2.0",
6
6
  "type": "module",
package/render.test.mjs CHANGED
@@ -214,6 +214,7 @@ test("rust-hybrid release chain preserves signed candidate, installed qualificat
214
214
  assert.match(content, /shell: pwsh\n run: \|\n throw 'installed_qualification_failed \{ reason: prerequisites_absent, detail: "same-run Windows signing\/finalization did not succeed" \}'/);
215
215
  assert.doesNotMatch(content, /^ run: throw 'installed_qualification_failed .*detail: /m);
216
216
  assert.match(content, /pnpm run release:qualify:installed/);
217
+ assert.match(content, /installed-qualification:[\s\S]*GH_TOKEN: \$\{\{ github\.token \}\}/);
217
218
  assert.match(content, /publish:\n needs: \[installed-qualification, macos-sign\]/);
218
219
  assert.match(content, /publish:[\s\S]*startsWith\(github\.ref, 'refs\/tags\/v'\)/);
219
220
  assert.doesNotMatch(content.slice(content.indexOf(" publish:")), /inputs\.signed_qualification/);