dsh-d365-kit 0.34.3 → 0.34.4

package/CHANGELOG.md

@@ -4,7 +4,7 @@
 
 Versioning: bug fixes bump the patch, new tools/capabilities bump the minor, changes to the config structure or renames bump the major.
 
-## 0.34.3
+## 0.34.4
 
 Publishing is now part of the repository: `.github/workflows/publish.yml` publishes to npm whenever the pushed `package.json` version is not on the registry yet.
 
@@ -12,7 +12,8 @@ Publishing is now part of the repository: `.github/workflows/publish.yml` publis
 - `node --check` runs before the publish, because a published npm version cannot be withdrawn or overwritten;
 - Authentication is opt-in: npm trusted publishing (OIDC, `id-token: write`, `--provenance`) through the `NPM_TRUSTED_PUBLISHING` variable, or a granular `NPM_TOKEN` secret; with neither configured the job prints a notice instead of failing;
 - The install docs no longer claim that pushing a tag is what publishes.
-- `0.34.2` never shipped: an earlier manual attempt had already put that exact version in the registry's stage queue, and a direct publish of it is refused with `E409 Cannot publish over previously staged version "0.34.2"`. The same content ships as `0.34.3`.
+- `0.34.2` never shipped: an earlier manual attempt had already put that exact version in the registry's stage queue, and publishing it again is refused with `E409 Cannot publish over previously staged version "0.34.2"`.
+- `0.34.3` was published by CI but only into that same stage queue: the trusted publisher allowed stage publishing but not direct publishing, and `npm publish` exits 0 when it stages. `0.34.4` is the first version that goes live on its own — turn on "Publish directly" under the trusted publisher's allowed actions.
 
 ## 0.34.1
 

package/CHANGELOG.zh-CN.md

@@ -4,7 +4,7 @@
 
 版本语义：修 bug 升 patch，加工具/加能力升 minor，改配置结构或改名升 major。
 
-## 0.34.3
+## 0.34.4
 
 发布进了仓库：`.github/workflows/publish.yml` 会在推送的 `package.json` 版本还没上架 npm 时自动发布。
 
@@ -12,7 +12,8 @@
 - 发布前先跑 `node --check` —— 已经发出去的 npm 版本撤不回、也盖不掉；
 - 认证是显式的：用 `NPM_TRUSTED_PUBLISHING` 变量开启 npm trusted publishing（OIDC、`id-token: write`、带 `--provenance`），或者配 `NPM_TOKEN` secret；两者都没有时只打一条 notice，不让 push 变红；
 - 安装文档不再说「推 tag 就会发布」。
-- `0.34.2` 没有发出来：更早一次手动发布已经把这个版本号留在了注册表的暂存队列里，再直接发同一个版本会被拒（`E409 Cannot publish over previously staged version "0.34.2"`），于是同样的内容以 `0.34.3` 发布。
+- `0.34.2` 没有发出来：更早一次手动发布已经把这个版本号留在了注册表的暂存队列里，再发同一个版本会被拒（`E409 Cannot publish over previously staged version "0.34.2"`）。
+- `0.34.3` 由 CI 发了，但也只进了那个暂存队列：trusted publisher 只允许 stage 发布、不允许直接发布，而「进暂存」时 `npm publish` 同样是退出码 0，看上去像成功了。`0.34.4` 是第一个无需人工批准就上线的版本 —— 前提是在 trusted publisher 的 Allowed actions 里勾上「Publish directly」。
 
 ## 0.34.1
 

package/INSTALL.md

@@ -19,7 +19,7 @@ For the complete steps, see [docs/en/installation.md](docs/en/installation.md).
 ### Option 1: Install from npm (shortest, upgradeable)
 
 ```
-plugin_manager install_bundle target="dsh-d365-kit@0.34.3"
+plugin_manager install_bundle target="dsh-d365-kit@0.34.4"
 ```
 
 This needs the package to be published to the registry pnpm uses — public npm or an internal mirror. The name has no scope, so no scope mapping is required.
@@ -29,7 +29,7 @@ This needs the package to be published to the registry pnpm uses — public npm
 ### Option 2: Install from Git (no registry needed)
 
 ```
-plugin_manager install_bundle target="git+https://<your Git>/<group>/dsh-d365-kit.git#v0.34.3"
+plugin_manager install_bundle target="git+https://<your Git>/<group>/dsh-d365-kit.git#v0.34.4"
 ```
 
 ### Option 3: Install from a local directory

package/INSTALL.zh-CN.md

@@ -18,7 +18,7 @@
 ### 方式一：从 npm 装（最短，可升级）
 
 ```
-plugin_manager install_bundle target="dsh-d365-kit@0.34.3"
+plugin_manager install_bundle target="dsh-d365-kit@0.34.4"
 ```
 
 前提是包已经发到 pnpm 用的那个 registry——公网 npm 或公司内网镜像都行。包名没有 scope，不需要配 scope 映射。
@@ -28,7 +28,7 @@ plugin_manager install_bundle target="dsh-d365-kit@0.34.3"
 ### 方式二：从 Git 装（不需要 registry）
 
 ```
-plugin_manager install_bundle target="git+https://<你的 Git>/<group>/dsh-d365-kit.git#v0.34.3"
+plugin_manager install_bundle target="git+https://<你的 Git>/<group>/dsh-d365-kit.git#v0.34.4"
 ```
 
 ### 方式三：从本地目录装

package/README.md

@@ -116,10 +116,10 @@ Prerequisites: DSH desktop; network access to `*.dynamics.com`; a read-only appl
 
 ```bash
 # From npm (shortest, upgradeable; works once the package is published)
-plugin_manager install_bundle target="dsh-d365-kit@0.34.3"
+plugin_manager install_bundle target="dsh-d365-kit@0.34.4"
 
 # From Git (no registry needed, pin a tag)
-plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.3"
+plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.4"
 
 # From a local directory (link: code changes take effect immediately)
 plugin_manager install_bundle target="D:\path\to\dsh-d365-kit"

package/README.zh-CN.md

@@ -116,10 +116,10 @@ DSH Web UI 的「设置 → D365 工具箱」，六个标签页：
 
 ```bash
 # 从 npm 安装（最短，可升级；包发布到 npm 或内网 registry 后可用）
-plugin_manager install_bundle target="dsh-d365-kit@0.34.3"
+plugin_manager install_bundle target="dsh-d365-kit@0.34.4"
 
 # 从 Git 安装（不需要 registry，可钉 tag）
-plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.3"
+plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.4"
 
 # 或从本地目录安装（link，改代码立刻生效）
 plugin_manager install_bundle target="D:\path\to\dsh-d365-kit"

package/docs/en/installation.md

@@ -20,7 +20,7 @@ A read-only application user is enough; for the write capabilities, messages suc
 ### Option 1: install from npm (shortest)
 
 ```bash
-plugin_manager install_bundle target="dsh-d365-kit@0.34.3"
+plugin_manager install_bundle target="dsh-d365-kit@0.34.4"
 ```
 
 Works once the package is published to the registry pnpm is configured against — public npm or an internal mirror. The package has no scope, so no scope mapping is needed. To install a specific version pin it as `dsh-d365-kit@<version>`.
@@ -30,7 +30,7 @@ Works once the package is published to the registry pnpm is configured against
 ### Option 2: install from Git (no registry needed)
 
 ```bash
-plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.3"
+plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.4"
 ```
 
 DSH pulls the package from git with pnpm. After installing, check:
@@ -128,7 +128,7 @@ If both return content, it works. The first `d365_sync` pulls the full metadata
 ```bash
 # installed from Git
 plugin_manager remove_bundle target=dsh-d365-kit
-plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.3"
+plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.4"
 ```
 
 After changing the version number you must **remove first, then install**: link/pnpm returns `already-installed` when it believes the package exists, and does not replace the code.

package/docs/zh/installation.md

@@ -20,7 +20,7 @@
 ### 方式一：从 npm 安装（最短）
 
 ```bash
-plugin_manager install_bundle target="dsh-d365-kit@0.34.3"
+plugin_manager install_bundle target="dsh-d365-kit@0.34.4"
 ```
 
 前提是包已经发到 pnpm 配置的 registry——公网 npm 或内网镜像都行。包名没有 scope，不需要配 scope 映射。要装指定版本就写 `dsh-d365-kit@<版本>`。
@@ -30,7 +30,7 @@ plugin_manager install_bundle target="dsh-d365-kit@0.34.3"
 ### 方式二：从 Git 安装（不需要 registry）
 
 ```bash
-plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.3"
+plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.4"
 ```
 
 DSH 用 pnpm 从 git 拉包。装完确认：
@@ -128,7 +128,7 @@ d365_metadata resource=entities top=3
 ```bash
 # 从 Git 安装的
 plugin_manager remove_bundle target=dsh-d365-kit
-plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.3"
+plugin_manager install_bundle target="git+https://<your-git>/<group>/dsh-d365-kit.git#v0.34.4"
 ```
 
 改版本号后必须**先 remove 再 install**：link/pnpm 认为包已存在时会返回 `already-installed`，不会替换代码。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-d365-kit",
-  "version": "0.34.3",
+  "version": "0.34.4",
   "type": "module",
   "description": "Dynamics 365 CE developer and deployment toolkit for DSH: metadata, layers, snapshots, migration risk, code checks, contract drift, environment health, plug-in traces, message invocation and business-record sync.",
   "license": "MIT",