mcp-rubber-duck 1.9.0 → 1.9.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/.github/workflows/semantic-release.yml +12 -1
  2. package/.releaserc.json +6 -1
  3. package/CHANGELOG.md +22 -0
  4. package/audit-ci.json +2 -1
  5. package/package.json +5 -1
package/.github/workflows/semantic-release.yml CHANGED
@@ -18,6 +18,7 @@ permissions:
18
18
  packages: write
19
19
  security-events: write
20
20
  actions: read
21
+ id-token: write
21
22
 
22
23
  jobs:
23
24
  test:
@@ -160,6 +161,7 @@ jobs:
160
161
  with:
161
162
  node-version: '20'
162
163
  cache: 'npm'
164
+ registry-url: 'https://registry.npmjs.org'
163
165
 
164
166
  - name: 📥 Install dependencies
165
167
  run: npm ci
@@ -177,7 +179,6 @@ jobs:
177
179
  - name: 📦 Run semantic-release
178
180
  env:
179
181
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
180
- NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
181
182
  run: npx semantic-release
182
183
 
183
184
  - name: 🏷️ Get latest tag after release
@@ -210,6 +211,16 @@ jobs:
210
211
  echo "No new release"
211
212
  fi
212
213
 
214
+ - name: 📦 Upgrade npm for OIDC support
215
+ if: steps.check-release.outputs.released == 'true'
216
+ run: |
217
+ npm install -g npm@latest
218
+ npm --version
219
+
220
+ - name: 📤 Publish to npm with provenance
221
+ if: steps.check-release.outputs.released == 'true'
222
+ run: npm publish --provenance --access public
223
+
213
224
  - name: 📊 Release Summary
214
225
  if: success()
215
226
  run: |
package/.releaserc.json CHANGED
@@ -12,7 +12,12 @@
12
12
  "changelogFile": "CHANGELOG.md"
13
13
  }
14
14
  ],
15
- "@semantic-release/npm",
15
+ [
16
+ "@semantic-release/npm",
17
+ {
18
+ "npmPublish": false
19
+ }
20
+ ],
16
21
  [
17
22
  "@semantic-release/git",
18
23
  {
package/CHANGELOG.md CHANGED
@@ -1,3 +1,25 @@
1
+ ## [1.9.3](https://github.com/nesquikm/mcp-rubber-duck/compare/v1.9.2...v1.9.3) (2026-01-19)
2
+
3
+
4
+ ### Bug Fixes
5
+
6
+ * upgrade npm to latest for OIDC trusted publishing ([a6ca82c](https://github.com/nesquikm/mcp-rubber-duck/commit/a6ca82cddd15bbd56a9e7eaabb513d7cb5b13d8c))
7
+
8
+ ## [1.9.2](https://github.com/nesquikm/mcp-rubber-duck/compare/v1.9.1...v1.9.2) (2026-01-19)
9
+
10
+
11
+ ### Bug Fixes
12
+
13
+ * configure registry-url for npm OIDC auth ([0798f7c](https://github.com/nesquikm/mcp-rubber-duck/commit/0798f7c94a0a69470d6cae9f27ca984ee2975ac8))
14
+
15
+ ## [1.9.1](https://github.com/nesquikm/mcp-rubber-duck/compare/v1.9.0...v1.9.1) (2026-01-19)
16
+
17
+
18
+ ### Bug Fixes
19
+
20
+ * switch to npm OIDC trusted publishing ([b1f92ca](https://github.com/nesquikm/mcp-rubber-duck/commit/b1f92ca97baba8ac50b77cf16c880174a4dd32fa))
21
+ * use native npm publish for OIDC provenance ([99fb6d8](https://github.com/nesquikm/mcp-rubber-duck/commit/99fb6d8d77a786e1b1c748bc9a3b68c81cffec99))
22
+
1
23
  # [1.9.0](https://github.com/nesquikm/mcp-rubber-duck/compare/v1.8.0...v1.9.0) (2026-01-15)
2
24
 
3
25
 
package/audit-ci.json CHANGED
@@ -6,6 +6,7 @@
6
6
  "report-type": "summary",
7
7
  "allowlist": [
8
8
  "GHSA-5j98-mcp5-4vw2",
9
- "GHSA-73rr-hh4g-fpgx"
9
+ "GHSA-73rr-hh4g-fpgx",
10
+ "GHSA-8qq5-rm4j-mr97"
10
11
  ]
11
12
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "mcp-rubber-duck",
3
- "version": "1.9.0",
3
+ "version": "1.9.3",
4
4
  "description": "An MCP server that bridges to multiple OpenAI-compatible LLMs - your AI rubber duck debugging panel",
5
5
  "main": "dist/index.js",
6
6
  "type": "module",
@@ -37,6 +37,10 @@
37
37
  "bugs": {
38
38
  "url": "https://github.com/nesquikm/mcp-rubber-duck/issues"
39
39
  },
40
+ "publishConfig": {
41
+ "provenance": true,
42
+ "access": "public"
43
+ },
40
44
  "dependencies": {
41
45
  "@modelcontextprotocol/sdk": "^1.24.0",
42
46
  "ajv": "^8.17.1",