dsh-data-quality 0.3.11 → 0.3.12

package/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.12] - 2026-09-19
+
+### Added
+
+- `pnpm run check:lockfile` (`scripts/check-lockfile-drift.mjs`) fails fast when `package.json` and `pnpm-lock.yaml` disagree; the probe is read-only and the documented checks chain runs it alongside the other gates.
+
+### Changed
+
+- The release workflow now publishes through **npm trusted publishing** (OIDC) instead of the long-lived `NPM_TOKEN` secret: `setup-node` no longer sets `registry-url` (its empty `_authToken` line made the registry answer 404 on PUT), npm is upgraded to >= 11.5.1 before publishing, and the "NPM_TOKEN is not set -> skip" guard is gone so a missing publisher cannot turn a release into a silent no-op.
 ## [0.3.11] - 2026-09-18
 
 ### Fixed

package/lib/index.js

@@ -1172,7 +1172,7 @@ function computeAccuracy(stats, table, declaredSchema) {
 * @module dsh-data-quality/version
 */
 /** The package version reported in persisted reports. */
-const VERSION = "0.3.11";
+const VERSION = "0.3.12";
 /**
 * Version of the persisted report schema. Bump it whenever a report's
 * canonical shape changes in a way old consumers cannot read (the durable

package/lib/types/version.d.ts

@@ -4,7 +4,7 @@
  * @module dsh-data-quality/version
  */
 /** The package version reported in persisted reports. */
-export declare const VERSION = "0.3.11";
+export declare const VERSION = "0.3.12";
 /**
  * Version of the persisted report schema. Bump it whenever a report's
  * canonical shape changes in a way old consumers cannot read (the durable

package/lib/types/version.js

@@ -4,7 +4,7 @@
  * @module dsh-data-quality/version
  */
 /** The package version reported in persisted reports. */
-export const VERSION = '0.3.11';
+export const VERSION = '0.3.12';
 /**
  * Version of the persisted report schema. Bump it whenever a report's
  * canonical shape changes in a way old consumers cannot read (the durable

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-data-quality",
-  "version": "0.3.11",
+  "version": "0.3.12",
   "description": "Deterministic data profiling, cleaning, and verification for DeepSeek Harness: a ctx.dataQuality capability seam (Service Definition / local Provider / tool Consumers) with data_profile, data_clean, and data_verify model tools, a frozen cross-plugin verifyCitations contract, durable reports in a storage domain, and data-quality/* session events on hosts that support them.",
   "repository": {
     "type": "git",
@@ -139,6 +139,7 @@
     "lint": "oxlint",
     "prepare": "node scripts/prepare.mjs",
     "verify:self-contained": "node scripts/verify-self-contained.mjs",
+    "check:lockfile": "node scripts/check-lockfile-drift.mjs",
     "verify:artifacts": "node scripts/verify-artifacts.mjs",
     "verify:readme-sync": "node scripts/check-readme-sync.mjs",
     "pack:check": "node scripts/prepare.mjs && pnpm pack"

package/src/version.ts

@@ -5,7 +5,7 @@
  */
 
 /** The package version reported in persisted reports. */
-export const VERSION = '0.3.11'
+export const VERSION = '0.3.12'
 
 /**
  * Version of the persisted report schema. Bump it whenever a report's