modelpact 2.0.2 → 2.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -234,9 +234,16 @@ const provider = name === null ? null : PROVIDERS[name];
|
|
|
234
234
|
**Versioned, and released by machine.** Semantic versioning from conventional
|
|
235
235
|
commits: [release-please](https://github.com/googleapis/release-please) opens
|
|
236
236
|
the release PR, [`CHANGELOG.md`](CHANGELOG.md) is written from the history, and
|
|
237
|
-
the tagged tree is what `npm publish` builds
|
|
238
|
-
|
|
239
|
-
|
|
237
|
+
the tagged tree is what `npm publish` builds. A `!` in a commit is a major, and
|
|
238
|
+
2.0 was one — four public names changed for the better, and the changelog says
|
|
239
|
+
which.
|
|
240
|
+
|
|
241
|
+
**Published without a key.** npm trusts this repository and this workflow file
|
|
242
|
+
by name, so the release job signs in with its own OIDC identity and a
|
|
243
|
+
credential that lives for one publish. There is no long-lived token to leak,
|
|
244
|
+
and every version carries a
|
|
245
|
+
[provenance attestation](https://docs.npmjs.com/generating-provenance-statements)
|
|
246
|
+
saying which commit and which workflow built it.
|
|
240
247
|
|
|
241
248
|
**Small on purpose.** ESM only, zero runtime dependencies, and the whole entry
|
|
242
249
|
is 13.6 kB minified, 4.9 kB gzipped, before tree-shaking takes the providers
|