From 20d5672632d2b528b95b47019e55638d37cfc001 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 17 Feb 2026 12:01:02 +0000 Subject: [PATCH 1/3] Initial plan From 7b2bcc09555250033620daaebb2de4848364dfa0 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 17 Feb 2026 12:02:37 +0000 Subject: [PATCH 2/3] Add id-token: write permission and npm publish flags for trusted publishing Co-authored-by: mkistler <800728+mkistler@users.noreply.github.com> --- .github/workflows/release.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 4c0f725..75d6580 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -13,6 +13,7 @@ jobs: permissions: contents: write + id-token: write # Required for npm provenance and trusted publishing steps: - uses: actions/checkout@v4 @@ -66,7 +67,7 @@ jobs: # Use the Trusted Publishing feature to publish the package # https://docs.npmjs.com/trusted-publishers - - run: npm publish + - run: npm publish --provenance --access public - name: Create GitHub Release uses: softprops/action-gh-release@v2 From f263284aeff88e1afc64ab78498364d88252ddd8 Mon Sep 17 00:00:00 2001 From: Mike Kistler Date: Tue, 17 Feb 2026 06:09:34 -0600 Subject: [PATCH 3/3] Fix lint error --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 75d6580..1b194e2 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -13,7 +13,7 @@ jobs: permissions: contents: write - id-token: write # Required for npm provenance and trusted publishing + id-token: write # Required for npm provenance and trusted publishing steps: - uses: actions/checkout@v4