@xbibzlibrary/telebibz 0.1.12 → 0.1.14

package/README.id.md

@@ -8,6 +8,8 @@
 
 Referensi API lengkap: [English](docs/API.md) · **Indonesia** · [中文](docs/API.zh-CN.md)
 
+Panduan GitHub Packages: [English](docs/GITHUB_PACKAGES.md) · [Bahasa Indonesia](docs/GITHUB_PACKAGES.id.md) · [简体中文](docs/GITHUB_PACKAGES.zh-CN.md)
+
 ![overview telebibz](https://cdn.jsdelivr.net/npm/@xbibzlibrary/telebibz@latest/assets/telebibz-readme-preview.png)
 
 ## Instalasi
@@ -143,7 +145,7 @@ Daftar method dihasilkan dari dokumentasi Telegram Bot API saat skema diperbarui
 
 ## Otomatisasi release
 
-Repository GitHub menyediakan CI dan workflow auto-publish. Setiap push ke `main` menjalankan quality gates, memilih patch version yang belum dipakai, membuat commit dan tag, menerbitkan package ke npm, lalu membuat GitHub Release. Karena source repository bersifat private, workflow menggunakan `--provenance=false`, sesuai batasan npm untuk source private. Konfigurasikan secret `NPM_TOKEN` pada GitHub Actions sebelum mengandalkan publish otomatis. Lihat [RELEASE_AUTOMATION.md](RELEASE_AUTOMATION.md).
+Repository GitHub menyediakan CI dan workflow auto-publish. Setiap push ke `main` menjalankan quality gates, memilih patch version yang belum dipakai, membuat commit dan tag, menerbitkan tarball yang sama ke npmjs dan GitHub Packages, lalu membuat GitHub Release. Karena source repository bersifat private, workflow menggunakan `--provenance=false` untuk npmjs. GitHub Packages memakai `GITHUB_TOKEN` dengan permission `packages: write`. Konfigurasikan secret `NPM_TOKEN` pada GitHub Actions sebelum mengandalkan publish otomatis. Lihat [RELEASE_AUTOMATION.md](RELEASE_AUTOMATION.md) dan panduan [GitHub Packages](docs/GITHUB_PACKAGES.id.md).
 
 ## Policy project dan kontribusi
 
@@ -155,7 +157,7 @@ Repository GitHub menyediakan CI dan workflow auto-publish. Setiap push ke `main
 | [GOVERNANCE.md](GOVERNANCE.md) | Peran, pengambilan keputusan, triage, perlindungan repository, dan perubahan aturan. |
 | [SECURITY.md](SECURITY.md) | Pelaporan vulnerability privat, batas security, dan rotasi credential. |
 | [SUPPORT.md](SUPPORT.md) | Channel support, aturan laporan aman, dan ekspektasi response. |
-| [RELEASE_AUTOMATION.md](RELEASE_AUTOMATION.md) | Automation GitHub-to-npm dan setup `NPM_TOKEN`. |
+| [RELEASE_AUTOMATION.md](RELEASE_AUTOMATION.md) | Automation GitHub-to-npm/GitHub Packages dan setup `NPM_TOKEN`. |
 | [RELEASE_POLICY.md](RELEASE_POLICY.md) | Kontrol immutable release dan hardening. |
 | [NOTICE.md](NOTICE.md) | Atribusi declaration pihak ketiga. |
 

package/README.md

@@ -12,6 +12,8 @@
 
 Complete API references: [English](docs/API.md) · [Indonesia](docs/API.id.md) · [中文](docs/API.zh-CN.md)
 
+GitHub Packages guide: [English](docs/GITHUB_PACKAGES.md) · [Bahasa Indonesia](docs/GITHUB_PACKAGES.id.md) · [简体中文](docs/GITHUB_PACKAGES.zh-CN.md)
+
 ![telebibz overview](https://cdn.jsdelivr.net/npm/@xbibzlibrary/telebibz@latest/assets/telebibz-readme-preview.png)
 
 ## Installation

package/README.zh-CN.md

@@ -8,6 +8,8 @@
 
 完整 API 参考：[English](docs/API.md) · [Indonesia](docs/API.id.md) · **中文**
 
+GitHub Packages 指南：[English](docs/GITHUB_PACKAGES.md) · [Bahasa Indonesia](docs/GITHUB_PACKAGES.id.md) · [简体中文](docs/GITHUB_PACKAGES.zh-CN.md)
+
 ![telebibz 概览](https://cdn.jsdelivr.net/npm/@xbibzlibrary/telebibz@latest/assets/telebibz-readme-preview.png)
 
 ## 安装
@@ -143,7 +145,7 @@ npm run release:check
 
 ## 发布自动化
 
-GitHub repository 提供 CI 和自动发布 workflow。每次推送到 `main` 都会运行 quality gates，选择尚未使用的 patch version，创建 commit 和 tag，发布 npm package，然后创建 GitHub Release。由于 source repository 是 private，workflow 使用 `--provenance=false`，符合 npm 对 private source 的限制。依赖自动发布前，请在 GitHub Actions 中配置 `NPM_TOKEN` secret。请参阅 [RELEASE_AUTOMATION.md](RELEASE_AUTOMATION.md)。
+GitHub repository 提供 CI 和自动发布 workflow。每次推送到 `main` 都会运行 quality gates，选择尚未使用的 patch version，创建 commit 和 tag，将相同的 tarball 发布到 npmjs 和 GitHub Packages，然后创建 GitHub Release。由于 source repository 是 private，npmjs 发布使用 `--provenance=false`；GitHub Packages 使用带有 `packages: write` 权限的 `GITHUB_TOKEN`。依赖自动发布前，请在 GitHub Actions 中配置 `NPM_TOKEN` secret。请参阅 [RELEASE_AUTOMATION.md](RELEASE_AUTOMATION.md) 和 [GitHub Packages 指南](docs/GITHUB_PACKAGES.zh-CN.md)。
 
 ## 项目 policy 和贡献
 
@@ -155,7 +157,7 @@ GitHub repository 提供 CI 和自动发布 workflow。每次推送到 `main`
 | [GOVERNANCE.md](GOVERNANCE.md) | 角色、决策、triage、repository protection 和规则修改。 |
 | [SECURITY.md](SECURITY.md) | 私密漏洞报告、security boundary 和 credential rotation。 |
 | [SUPPORT.md](SUPPORT.md) | Support channel、安全报告规则和 response 预期。 |
-| [RELEASE_AUTOMATION.md](RELEASE_AUTOMATION.md) | GitHub-to-npm automation 和 `NPM_TOKEN` setup。 |
+| [RELEASE_AUTOMATION.md](RELEASE_AUTOMATION.md) | GitHub-to-npm/GitHub Packages automation 和 `NPM_TOKEN` setup。 |
 | [RELEASE_POLICY.md](RELEASE_POLICY.md) | Immutable release 和 hardening 控制。 |
 | [NOTICE.md](NOTICE.md) | 第三方 declaration attribution。 |
 

package/RELEASE_AUTOMATION.md

@@ -1,6 +1,6 @@
-# GitHub-to-npm Release Automation
+# GitHub-to-npm and GitHub Packages Release Automation
 
-Repository ini menggunakan GitHub Actions untuk menjaga source GitHub dan package npm tetap sinkron melalui satu jalur release yang tervalidasi. Repository source tetap private; karena itu workflow menggunakan npm publish tanpa provenance, sesuai batasan registry npm untuk source private.
+Repository ini menggunakan GitHub Actions untuk menjaga source GitHub, package npmjs, dan package GitHub Packages tetap sinkron melalui satu jalur release yang tervalidasi. Repository source tetap private; karena itu workflow menggunakan npm publish tanpa provenance, sesuai batasan registry npm untuk source private. Panduan instalasi GitHub Packages tersedia dalam [English](docs/GITHUB_PACKAGES.md), [Bahasa Indonesia](docs/GITHUB_PACKAGES.id.md), dan [简体中文](docs/GITHUB_PACKAGES.zh-CN.md).
 
 ## Alur otomatis
 
@@ -12,21 +12,24 @@ Setiap push ke branch `main` menjalankan workflow `.github/workflows/auto-publis
 | Install | Menjalankan `npm ci --ignore-scripts`. |
 | Version | Membaca versi dari `package.json`, membaca versi latest npm, lalu memilih patch version berikutnya yang lebih tinggi dari keduanya. |
 | Verification | Menjalankan typecheck, type-level tests, lint, runtime tests, build ESM/CommonJS, security audit, dan release check. |
-| Immutable guard | Menolak publish jika versi target sudah ada di npm. |
+| Immutable guard | Menolak publish jika versi target sudah ada di npmjs atau GitHub Packages. |
 | Git sync | Commit otomatis `chore(release): vX.Y.Z [skip release]`, membuat annotated tag `vX.Y.Z`, lalu push commit dan tag ke GitHub. |
-| npm publish | Menerbitkan package public menggunakan `NPM_TOKEN`; provenance dinonaktifkan karena npm menolak provenance dari source repository private. |
+| npmjs publish | Menerbitkan tarball terverifikasi ke npmjs menggunakan `NPM_TOKEN`; provenance dinonaktifkan karena npm menolak provenance dari source repository private. |
+| GitHub Packages publish | Menerbitkan tarball yang sama ke `https://npm.pkg.github.com` menggunakan `GITHUB_TOKEN` dan permission `packages: write`. |
 | GitHub Release | Membuat GitHub Release dengan generated notes. |
 
 Push commit version otomatis tidak memicu release kedua karena mengandung `[skip release]`. Workflow menggunakan concurrency sehingga release berjalan satu per satu.
 
-## Secret yang wajib tersedia
+## Secret dan permission yang wajib tersedia
 
-Buka repository GitHub, kemudian masuk ke **Settings → Secrets and variables → Actions** dan tambahkan repository secret:
+Workflow membutuhkan `packages: write` untuk GitHub Packages dan `contents: write` untuk version bump, tag, serta GitHub Release. Buka repository GitHub, kemudian masuk ke **Settings → Secrets and variables → Actions** dan tambahkan repository atau environment secret berikut:
 
 ```text
 NPM_TOKEN=${NPM_TOKEN}
 ```
 
+GitHub Packages menggunakan `GITHUB_TOKEN` bawaan Actions; tidak perlu membuat atau menyimpan GitHub PAT sebagai repository secret untuk package yang diterbitkan oleh workflow repository ini.
+
 Jika memakai GitHub Environment bernama `npm-release`, secret dapat disimpan sebagai environment secret dan environment tersebut dapat diberi required reviewers untuk approval manual sebelum publish.
 
 Jangan menyimpan token di repository, `.npmrc`, source code, issue, commit, atau workflow. Token npm yang pernah ditempelkan di chat harus dicabut dan diganti dengan granular token baru.
@@ -63,4 +66,5 @@ Setelah workflow selesai, verifikasi:
 
 ```bash
 npm view @xbibzlibrary/telebibz version dist.integrity dist.tarball
+npm view @xbibzlibrary/telebibz version --registry=https://npm.pkg.github.com
 ```

package/docs/API.md

@@ -1001,7 +1001,7 @@ interface PluginApi<Context> {
 }
 ```
 
-In this release, `registerMiddleware` and `registerRoute` are available as API hooks but the implementation manager does not yet connect them automatically to the bot/router. Plugins may use `api.bot` and `api.services` directly.
+In this release, `registerMiddleware` connects plugin middleware to `bot.use()`, and `registerRoute` connects plugin routes to `bot.router.route()`. The bot lifecycle invokes plugin `onUpdate` and `onStop` hooks automatically.
 
 ### `ServiceContainer`
 
@@ -1032,7 +1032,7 @@ new PluginManager<Context>(bot: unknown): PluginManager<Context>
 | `dispose()` | Executes `dispose` in reverse registration order. |
 | `list()` | Returns a read-only list of plugins. |
 
-`Bot.handleUpdate()` in this release does not call `plugins.update()` automatically; call the manager explicitly if plugins require an update lifecycle.
+`Bot.handleUpdate()` calls `plugins.update()` automatically after the update is processed, and `Bot.stop()` invokes plugin stop hooks before disposal.
 
 ---
 

package/docs/GITHUB_PACKAGES.id.md

@@ -0,0 +1,82 @@
+# GitHub Packages
+
+`@xbibzlibrary/telebibz` dirilis ke [npmjs](https://www.npmjs.com/package/@xbibzlibrary/telebibz) dan registry npm GitHub Packages. Repository GitHub resminya adalah [XbibzOfficial777/telebibz](https://github.com/XbibzOfficial777/telebibz).
+
+## Registry
+
+URL registry GitHub Packages:
+
+```text
+https://npm.pkg.github.com
+```
+
+Mapping scope npm:
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+```
+
+Workflow release mempublikasikan tarball yang sama ke npmjs dan GitHub Packages setelah typecheck, test, build, security audit, dan release check berhasil. Workflow menggunakan `GITHUB_TOKEN` dengan permission `packages: write`; personal access token GitHub tidak disimpan di repository atau workflow.
+
+## Instalasi package
+
+Untuk package public, tambahkan mapping berikut pada `.npmrc` project yang memakai package:
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+```
+
+Jika package atau repository bersifat private, gunakan **personal access token (classic)** dengan minimal akses `read:packages`. Simpan token di luar repository, sebaiknya melalui environment variable reference pada konfigurasi npm user:
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+//npm.pkg.github.com/:_authToken=${GITHUB_PACKAGES_TOKEN}
+```
+
+Kemudian jalankan:
+
+```bash
+export GITHUB_PACKAGES_TOKEN="<token-read-packages-kamu>"
+npm install @xbibzlibrary/telebibz
+```
+
+Jangan mengganti placeholder dengan token asli di file yang di-commit. Jangan commit `.npmrc` yang berisi kredensial literal, dan jangan memasukkan token ke issue, pull request, log, atau chat.
+
+## Publikasi lokal
+
+Cara yang direkomendasikan adalah workflow GitHub Actions yang telah dilindungi. Workflow memeriksa versi dan hanya publish setelah seluruh release gate berhasil. Publikasi lokal hanya untuk maintainer yang memiliki personal access token (classic) dengan `write:packages` serta permission repository:
+
+```bash
+export GITHUB_PACKAGES_TOKEN="<token-write-packages-kamu>"
+printf '@xbibzlibrary:registry=https://npm.pkg.github.com\n//npm.pkg.github.com/:_authToken=${GITHUB_PACKAGES_TOKEN}\n' > "$HOME/.npmrc"
+npm run build
+npm pack
+npm publish ./xbibzlibrary-telebibz-<version>.tgz --registry=https://npm.pkg.github.com --access public
+```
+
+Gunakan semantic version baru untuk setiap publikasi. Versi registry bersifat immutable dan tidak boleh ditimpa.
+
+## Permission GitHub Actions
+
+Workflow release menggunakan permission minimum berikut:
+
+```yaml
+permissions:
+  contents: write
+  packages: write
+```
+
+`NPM_TOKEN` tetap menjadi environment secret untuk publikasi ke npmjs. GitHub Packages menggunakan `GITHUB_TOKEN` otomatis, sehingga tidak memerlukan secret GitHub tambahan untuk package milik repository ini. Jika kebijakan organisasi menonaktifkan pewarisan akses package, hubungkan package ke repository dan berikan akses workflow melalui pengaturan package.
+
+## Troubleshooting
+
+Respons `401 Unauthorized` biasanya berarti token tidak ada, sudah kedaluwarsa, atau tidak mempunyai scope package yang benar. Respons `403 Forbidden` biasanya berarti akun atau workflow tidak memiliki permission package, atau kebijakan organisasi memblokir publikasi. Respons `404 Not Found` dapat muncul ketika package private diakses tanpa autentikasi atau scope belum diarahkan ke `https://npm.pkg.github.com`.
+
+Untuk instalasi dari npmjs, hapus mapping GitHub scope atau gunakan registry npm default. Kedua registry berisi nama package dan versi yang sama, tetapi autentikasi dan access control dikelola secara terpisah.
+
+## Referensi
+
+1. [Working with the npm registry — GitHub Docs](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry)
+2. [About permissions for GitHub Packages — GitHub Docs](https://docs.github.com/en/packages/learn-github-packages/about-permissions-for-github-packages)
+3. [Publishing and installing a package with GitHub Actions — GitHub Docs](https://docs.github.com/en/packages/quickstart)
+4. [npm package.json publishConfig — npm Docs](https://docs.npmjs.com/cli/v10/configuring-npm/package-json#publishconfig)

package/docs/GITHUB_PACKAGES.md

@@ -0,0 +1,82 @@
+# GitHub Packages
+
+`@xbibzlibrary/telebibz` is released to both [npmjs](https://www.npmjs.com/package/@xbibzlibrary/telebibz) and the GitHub Packages npm registry. The canonical GitHub repository is [XbibzOfficial777/telebibz](https://github.com/XbibzOfficial777/telebibz).
+
+## Registry
+
+GitHub Packages uses the following npm registry URL:
+
+```text
+https://npm.pkg.github.com
+```
+
+The package scope is mapped to GitHub Packages with:
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+```
+
+The release workflow publishes the same verified tarball to npmjs and GitHub Packages after the type checks, tests, build, security audit, and release checks pass. The workflow uses `GITHUB_TOKEN` with `packages: write`; no GitHub personal access token is stored in the repository or workflow file.
+
+## Installing the package
+
+For a public package, use a GitHub Packages-aware `.npmrc` in the consuming project:
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+```
+
+If the package or repository is private, authenticate with a **personal access token (classic)** that has at least `read:packages` access. Store the token outside the repository, preferably in the user-level npm configuration or an environment-variable reference:
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+//npm.pkg.github.com/:_authToken=${GITHUB_PACKAGES_TOKEN}
+```
+
+Then install the package:
+
+```bash
+export GITHUB_PACKAGES_TOKEN="<your-read-packages-token>"
+npm install @xbibzlibrary/telebibz
+```
+
+Do not replace the placeholder with a real token in a committed file. Do not commit `.npmrc` files containing literal credentials, and do not paste tokens into issues, pull requests, logs, or chat.
+
+## Publishing locally
+
+The recommended publishing path is the protected GitHub Actions workflow. It verifies the version and publishes only after all release gates succeed. Local publishing is intended for maintainers who have a classic personal access token with `write:packages` and repository permission to publish packages:
+
+```bash
+export GITHUB_PACKAGES_TOKEN="<your-write-packages-token>"
+printf '@xbibzlibrary:registry=https://npm.pkg.github.com\n//npm.pkg.github.com/:_authToken=${GITHUB_PACKAGES_TOKEN}\n' > "$HOME/.npmrc"
+npm run build
+npm pack
+npm publish ./xbibzlibrary-telebibz-<version>.tgz --registry=https://npm.pkg.github.com --access public
+```
+
+Use a new semantic version for every publication. Registry versions are immutable; an existing version must never be overwritten.
+
+## GitHub Actions permissions
+
+The release workflow declares the minimum package permission required for publication:
+
+```yaml
+permissions:
+  contents: write
+  packages: write
+```
+
+`NPM_TOKEN` remains an environment secret for npmjs publication. GitHub Packages uses the automatically provided `GITHUB_TOKEN`, so no additional GitHub token secret is required for the repository's own package. If organization policy disables automatic package access inheritance, connect the package to the repository and grant the workflow access under the package's settings.
+
+## Troubleshooting
+
+A `401 Unauthorized` response normally means the token is missing, expired, or lacks the required package scope. A `403 Forbidden` response usually means the account or workflow does not have permission to the package, or that organization policy blocks publication. A `404 Not Found` response can occur when a private package is queried without authentication or when the scope is not mapped to `https://npm.pkg.github.com`.
+
+For npmjs installation, omit the GitHub scope mapping or use the default npm registry. Both registries contain the same package name and release version, but authentication and access control are handled independently.
+
+## References
+
+1. [Working with the npm registry — GitHub Docs](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry)
+2. [About permissions for GitHub Packages — GitHub Docs](https://docs.github.com/en/packages/learn-github-packages/about-permissions-for-github-packages)
+3. [Publishing and installing a package with GitHub Actions — GitHub Docs](https://docs.github.com/en/packages/quickstart)
+4. [npm package.json publishConfig — npm Docs](https://docs.npmjs.com/cli/v10/configuring-npm/package-json#publishconfig)

package/docs/GITHUB_PACKAGES.zh-CN.md

@@ -0,0 +1,82 @@
+# GitHub Packages
+
+`@xbibzlibrary/telebibz` 同时发布到 [npmjs](https://www.npmjs.com/package/@xbibzlibrary/telebibz) 和 GitHub Packages npm registry。官方 GitHub 仓库是 [XbibzOfficial777/telebibz](https://github.com/XbibzOfficial777/telebibz)。
+
+## Registry
+
+GitHub Packages 使用以下 npm registry 地址：
+
+```text
+https://npm.pkg.github.com
+```
+
+npm scope 映射如下：
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+```
+
+release workflow 会在 typecheck、测试、构建、安全审计和 release check 全部通过后，将同一个经过验证的 tarball 发布到 npmjs 和 GitHub Packages。workflow 使用具有 `packages: write` 权限的 `GITHUB_TOKEN`，不会把 GitHub personal access token 存储在仓库或 workflow 文件中。
+
+## 安装 package
+
+对于 public package，可以在使用方项目的 `.npmrc` 中加入：
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+```
+
+如果 package 或 repository 是 private，请使用具有至少 `read:packages` 权限的 **personal access token (classic)**。请将 token 保存在仓库之外，建议使用 npm 用户配置中的环境变量引用：
+
+```ini
+@xbibzlibrary:registry=https://npm.pkg.github.com
+//npm.pkg.github.com/:_authToken=${GITHUB_PACKAGES_TOKEN}
+```
+
+然后执行：
+
+```bash
+export GITHUB_PACKAGES_TOKEN="<your-read-packages-token>"
+npm install @xbibzlibrary/telebibz
+```
+
+不要把真实 token 写入已经提交的文件。不要提交包含明文凭据的 `.npmrc`，也不要在 issue、pull request、日志或聊天中粘贴 token。
+
+## 本地发布
+
+推荐使用受保护的 GitHub Actions workflow 发布。workflow 会检查版本，并且只有所有 release gate 成功后才会发布。本地发布仅适用于拥有 `write:packages` classic token 以及 repository 发布权限的 maintainer：
+
+```bash
+export GITHUB_PACKAGES_TOKEN="<your-write-packages-token>"
+printf '@xbibzlibrary:registry=https://npm.pkg.github.com\n//npm.pkg.github.com/:_authToken=${GITHUB_PACKAGES_TOKEN}\n' > "$HOME/.npmrc"
+npm run build
+npm pack
+npm publish ./xbibzlibrary-telebibz-<version>.tgz --registry=https://npm.pkg.github.com --access public
+```
+
+每次发布必须使用新的 semantic version。registry 中的版本是 immutable，不能覆盖已有版本。
+
+## GitHub Actions 权限
+
+release workflow 声明了发布所需的最小权限：
+
+```yaml
+permissions:
+  contents: write
+  packages: write
+```
+
+`NPM_TOKEN` 仍然作为 npmjs 发布所需的 environment secret。GitHub Packages 使用自动提供的 `GITHUB_TOKEN`，因此本仓库的 package 不需要额外的 GitHub token secret。如果组织策略关闭了 package 权限自动继承，请在 package 设置中连接 repository，并授予 workflow 访问权限。
+
+## 故障排查
+
+`401 Unauthorized` 通常表示 token 缺失、过期或没有正确的 package scope。`403 Forbidden` 通常表示账号或 workflow 没有 package 权限，或者组织策略禁止发布。访问 private package 时没有认证，或 scope 没有映射到 `https://npm.pkg.github.com`，也可能得到 `404 Not Found`。
+
+从 npmjs 安装时，请删除 GitHub scope mapping 或使用默认 npm registry。两个 registry 包含相同的 package 名称和版本，但认证和 access control 独立管理。
+
+## 参考资料
+
+1. [Working with the npm registry — GitHub Docs](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry)
+2. [About permissions for GitHub Packages — GitHub Docs](https://docs.github.com/en/packages/learn-github-packages/about-permissions-for-github-packages)
+3. [Publishing and installing a package with GitHub Actions — GitHub Docs](https://docs.github.com/en/packages/quickstart)
+4. [npm package.json publishConfig — npm Docs](https://docs.npmjs.com/cli/v10/configuring-npm/package-json#publishconfig)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xbibzlibrary/telebibz",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "Production-grade, strongly typed Telegram Bot API SDK and framework for Node.js and TypeScript.",
   "type": "module",
   "private": false,