consolidate npm publishing for trusted publishing (OIDC) - #26

Merged

iamalwaysuncomfortable merged 8 commits into

mainfrom

npm-trusted-publishing

Jul 29, 2026

Commits on Jul 29, 2026

consolidate npm publishing into npm-publish.yml
iamalwaysuncomfortable
committed
93a053e
make npm publish fail the release run, publish from the tag, and retry safely
iamalwaysuncomfortable
committed
9104822
address review findings: clock skew, prerelease semver, shell interpolation
iamalwaysuncomfortable
committed
953b00b
identify the dispatched npm-publish run by id instead of timestamp guessing
iamalwaysuncomfortable
committed
7be58e3
restrict npm publishing to stable tags and never publish backwards
iamalwaysuncomfortable
committed
8fa4ede
only the newest stable tag may be published to npm
iamalwaysuncomfortable
committed
75734a5
preinstall semver and match the dispatch id exactly
iamalwaysuncomfortable
committed
99682f3
pin the semver CLI to an exact version
iamalwaysuncomfortable
committed
4e697dc