ts-graphviz 3.0.3 → 3.0.4-next-7b437cebe226be463a90ee619542edead8b8f9e5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +57 -1
  2. package/package.json +5 -5
package/CHANGELOG.md CHANGED
@@ -1,11 +1,67 @@
1
1
  # ts-graphviz
2
2
 
3
- ## 3.0.3
3
+ ## 3.0.4-next-7b437cebe226be463a90ee619542edead8b8f9e5
4
4
 
5
5
  ### Patch Changes
6
6
 
7
+ - [#1513](https://github.com/ts-graphviz/ts-graphviz/pull/1513) [`9d52d28`](https://github.com/ts-graphviz/ts-graphviz/commit/9d52d282031ed173a75ef0fb77ddea9677f78520) Thanks [@kamiazya](https://github.com/kamiazya)! - Fix @next tag publishing pipeline to prevent incorrect releases
8
+
9
+ This fix addresses issues with the @next tag publishing workflow where stable versions were incorrectly published with @next tag, and subsequently, @next versions stopped being published entirely.
10
+
11
+ **Problem 1 (PR #1513):**
12
+ Stable package versions were being incorrectly published with the @next tag instead of the latest tag. The Changesets action switches to `changeset-release/main` and updates package.json versions, but the @next publish step would run on this branch where no unreleased changesets remain, causing stable versions to be published with @next tag.
13
+
14
+ **Solution 1:**
15
+ Added a branch check step to verify the current working directory is on the main branch before executing @next publish.
16
+
17
+ **Problem 2 (This PR):**
18
+ The branch check from PR #1513 prevented ALL @next publishes because the changesets action never switches back to main, causing the branch check to always fail.
19
+
20
+ **Solution 2:**
21
+ Added a step to switch back to the main branch after the changesets action completes. This ensures the working directory is in the correct state for snapshot versioning while maintaining the safety check.
22
+
23
+ **Changes:**
24
+
25
+ - Added branch check to verify current branch before @next publish
26
+ - Added `git checkout main` step after changesets action
27
+ - Updated @next publish condition to include branch verification
28
+ - Removed redundant commit message check that was ineffective
29
+
7
30
  - [#1506](https://github.com/ts-graphviz/ts-graphviz/pull/1506) [`1b94e27`](https://github.com/ts-graphviz/ts-graphviz/commit/1b94e27674bf33b8e605c54eef6f05c5dd95852a) Thanks [@ktej721](https://github.com/ktej721)! - docs(ts-graphviz): correct malformed JSDoc comment in model-factory.ts
8
31
 
32
+ - [#1514](https://github.com/ts-graphviz/ts-graphviz/pull/1514) [`d74172a`](https://github.com/ts-graphviz/ts-graphviz/commit/d74172a594531f071b7e06c079b6555d867bf683) Thanks [@kamiazya](https://github.com/kamiazya)! - Migrate npm publishing to OIDC trusted publishing
33
+
34
+ This change migrates the npm publishing workflow from using long-lived NPM_TOKEN secrets to OIDC (OpenID Connect) trusted publishing, following GitHub's security recommendations announced in September 2025.
35
+
36
+ **Benefits:**
37
+
38
+ - Enhanced security: No more long-lived tokens to manage, rotate, or accidentally expose
39
+ - Automatic provenance: Provenance attestations are generated automatically without the --provenance flag
40
+ - Compliance: Aligns with npm's new authentication requirements (token expiration limits)
41
+ - Short-lived credentials: Each publish uses workflow-specific, ephemeral credentials
42
+
43
+ **Changes:**
44
+
45
+ - Added `environment: npm` to the release job to match trusted publisher configuration
46
+ - Upgraded npm CLI to latest version (≥11.5.1) for OIDC support
47
+ - Removed NPM_TOKEN from changesets action and snapshot publish steps
48
+ - Removed manual .npmrc creation as authentication now uses OIDC tokens
49
+ - Updated id-token permission comment to reflect OIDC usage
50
+
51
+ **Requirements:**
52
+
53
+ - npm CLI v11.5.1 or later (automatically installed in workflow)
54
+ - Trusted publisher configured for each package on npmjs.com
55
+ - GitHub Actions environment named "npm" configured for the repository
56
+
57
+ - [#1512](https://github.com/ts-graphviz/ts-graphviz/pull/1512) [`de566db`](https://github.com/ts-graphviz/ts-graphviz/commit/de566db993e1f62325f3a4afdbde178b86a96509) Thanks [@anubhav-goel](https://github.com/anubhav-goel)! - Updated broken monorepo package links to valid URLs
58
+
59
+ - Updated dependencies [[`9d52d28`](https://github.com/ts-graphviz/ts-graphviz/commit/9d52d282031ed173a75ef0fb77ddea9677f78520), [`d74172a`](https://github.com/ts-graphviz/ts-graphviz/commit/d74172a594531f071b7e06c079b6555d867bf683), [`de566db`](https://github.com/ts-graphviz/ts-graphviz/commit/de566db993e1f62325f3a4afdbde178b86a96509), [`48a9fba`](https://github.com/ts-graphviz/ts-graphviz/commit/48a9fba55522d02ea3c4d62321e2555943971b88)]:
60
+ - @ts-graphviz/adapter@3.0.3-next-7b437cebe226be463a90ee619542edead8b8f9e5
61
+ - @ts-graphviz/ast@3.0.3-next-7b437cebe226be463a90ee619542edead8b8f9e5
62
+ - @ts-graphviz/common@3.0.3-next-7b437cebe226be463a90ee619542edead8b8f9e5
63
+ - @ts-graphviz/core@3.0.4-next-7b437cebe226be463a90ee619542edead8b8f9e5
64
+
9
65
  ## 3.0.2
10
66
 
11
67
  ### Patch Changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "ts-graphviz",
3
- "version": "3.0.3",
3
+ "version": "3.0.4-next-7b437cebe226be463a90ee619542edead8b8f9e5",
4
4
  "description": "Graphviz library for TypeScript",
5
5
  "keywords": [
6
6
  "graphviz",
@@ -45,10 +45,10 @@
45
45
  "./package.json": "./package.json"
46
46
  },
47
47
  "dependencies": {
48
- "@ts-graphviz/adapter": "^3.0.2",
49
- "@ts-graphviz/ast": "^3.0.2",
50
- "@ts-graphviz/common": "^3.0.2",
51
- "@ts-graphviz/core": "^3.0.2"
48
+ "@ts-graphviz/adapter": "^3.0.3-next-7b437cebe226be463a90ee619542edead8b8f9e5",
49
+ "@ts-graphviz/ast": "^3.0.3-next-7b437cebe226be463a90ee619542edead8b8f9e5",
50
+ "@ts-graphviz/common": "^3.0.3-next-7b437cebe226be463a90ee619542edead8b8f9e5",
51
+ "@ts-graphviz/core": "^3.0.4-next-7b437cebe226be463a90ee619542edead8b8f9e5"
52
52
  },
53
53
  "devDependencies": {
54
54
  "typescript": "^5.8.2",