dsh-doublecheck 0.9.12 → 0.9.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +9 -0
  2. package/package.json +2 -1
package/CHANGELOG.md CHANGED
@@ -2,6 +2,15 @@
2
2
 
3
3
  All notable changes to dsh-doublecheck are recorded here, newest first.
4
4
 
5
+ ## [0.9.13] - 2026-09-19
6
+
7
+ ### Added
8
+
9
+ - `pnpm run check:lockfile` (`scripts/check-lockfile-drift.mjs`) fails fast when `package.json` and `pnpm-lock.yaml` disagree; the probe is read-only and the documented checks chain runs it alongside the other gates.
10
+
11
+ ### Changed
12
+
13
+ - The release workflow now publishes through **npm trusted publishing** (OIDC) instead of the long-lived `NPM_TOKEN` secret: `setup-node` no longer sets `registry-url` (its empty `_authToken` line made the registry answer 404 on PUT), npm is upgraded to >= 11.5.1 before publishing, and the "NPM_TOKEN is not set -> skip" guard is gone so a missing publisher cannot turn a release into a silent no-op.
5
14
  ## [0.9.12] - 2026-09-18
6
15
 
7
16
  ### Fixed
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "dsh-doublecheck",
3
- "version": "0.9.12",
3
+ "version": "0.9.13",
4
4
  "description": "Delivery quality gate for DeepSeek Harness: grill the requirements, test the implementation, prove the delivery, and gate the handoff with a deliverable/rework decision.",
5
5
  "packageManager": "pnpm@11.7.0",
6
6
  "repository": {
@@ -63,6 +63,7 @@
63
63
  "test": "vitest run",
64
64
  "test:coverage": "vitest run --coverage",
65
65
  "verify:skills": "node scripts/verify-skills.mjs",
66
+ "check:lockfile": "node scripts/check-lockfile-drift.mjs",
66
67
  "check:readmes": "node scripts/check-readme-sync.mjs",
67
68
  "verify:self-contained": "node scripts/verify-self-contained.mjs",
68
69
  "verify:artifacts": "node scripts/verify-artifacts.mjs",