ci(release): publish to npm through OIDC trusted publishing - #4684

Merged

Yeachan-Heo merged 11 commits into

devfrom

ci/oidc-trusted-publishing

Aug 22, 2026

Commits on Aug 22, 2026

ci(release): derive GitHub Release notes from the release range

Yeachan-Heo
authored and
gaebal-gajae
committed
733f0ce
ci(release): harden OIDC publish path against snowykr P1 review blockers

Yeachan Heo
authored and
gaebal-gajae
committed
5960003
ci(release): reconcile ambiguous atomic pushes and bound tag trust for OIDC publish

Yeachan Heo
authored and
gaebal-gajae
committed
e8e73f3
ci(release): preserve state on ambiguous pushes, slim the OIDC publish boundary

Yeachan Heo
authored and
gaebal-gajae
committed
d5872db
ci(release): keep dependency resolution out of publish and gate on approval environment

Yeachan Heo
authored and
gaebal-gajae
committed
1ab8e2d
ci(release): scope the approval environment to stable releases only

Yeachan Heo
authored and
gaebal-gajae
committed
5abdaeb
ci(release): make the OIDC publish job a fixed boundary with no repository code

Yeachan Heo
authored and
gaebal-gajae
committed
430d07f
ci(release): seal the dependency-ordered publish plan for the fixed boundary

Yeachan Heo
authored and
gaebal-gajae
committed
59700b3
fix(release-notes): select first merged PR by merge time, not creation time

Yeachan Heo
authored and
gaebal-gajae
committed
ad30b14
fix(release-notes): enforce coverage on referenced PRs
gaebal-gajae
committed
b729fb3
fix(release-notes): recognize squash merge commits
gaebal-gajae
committed
983356a