opencode-courier 0.1.1-beta.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of opencode-courier might be problematic. Click here for more details.
- package/README.md +18 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -299,6 +299,24 @@ If staging fails, nothing reached npm and the version is still free. Re-running
|
|
|
299
299
|
workflow file at the tag, so after fixing `release.yml` move the tag to the fixed commit instead:
|
|
300
300
|
`git push origin :refs/tags/vX.Y.Z`, then tag and push again.
|
|
301
301
|
|
|
302
|
+
**npm cannot use trusted publishing for this repository yet.** The registry rejects the immutable
|
|
303
|
+
OIDC subject claims GitHub issues for repositories created after 2026-07-15
|
|
304
|
+
([npm/cli#9969](https://github.com/npm/cli/issues/9969)), so `release.yml` fails at Stage with
|
|
305
|
+
`OIDC token exchange error - package not found` in its verbose log, although the claims it prints
|
|
306
|
+
match the trusted publisher. Until npm fixes this, stage by hand from the tag, still without a
|
|
307
|
+
stored token (npm 11.15.0 or later, Node 22.14 or later):
|
|
308
|
+
|
|
309
|
+
```bash
|
|
310
|
+
git checkout vX.Y.Z
|
|
311
|
+
npm install && npm run build
|
|
312
|
+
npm login
|
|
313
|
+
npm stage publish --access public # add --tag next for a prerelease
|
|
314
|
+
```
|
|
315
|
+
|
|
316
|
+
Approve the staged version with 2FA as above, then create the release:
|
|
317
|
+
`gh release create vX.Y.Z --verify-tag --generate-notes` (add `--prerelease` for a prerelease). A
|
|
318
|
+
version staged by hand has no provenance attestation.
|
|
319
|
+
|
|
302
320
|
A prerelease version (`1.2.0-beta.1`) is staged for the `next` dist-tag and its release is marked
|
|
303
321
|
as a prerelease.
|
|
304
322
|
|