Skip to content

ci(assets): stage releases with trusted publishing - #7

Merged
YunYouJun merged 1 commit into
mainfrom
codex/assets-trusted-stage-publish
Sep 24, 2026
Merged

YunYouJun merged 1 commit into
mainfrom
codex/assets-trusted-stage-publish

Conversation

@YunYouJun

Copy link
Copy Markdown
Member

Summary

  • Add a dedicated manual GitHub Actions workflow that tests, builds, and stages only @yunlefun/assets using npm OIDC trusted publishing.
  • Exclude the assets package from the legacy token-backed monorepo release command.
  • Document the staged review and 2FA approval process for subsequent versions.

Validation

  • pnpm lint
  • pnpm typecheck
  • pnpm exec vitest run (16 tests)
  • pnpm build
  • git diff --check
  • Verified the legacy publish filter excludes @yunlefun/assets.

Rollout

After merge, bind the npm package to YunLeFun/toolkit / publish-assets.yml with the npm-publish environment and stage-only permission. The existing 0.1.0 release stays unchanged.

@YunYouJun
YunYouJun merged commit 524ecba into main Sep 24, 2026
4 checks passed
@YunYouJun
YunYouJun deleted the codex/assets-trusted-stage-publish branch September 24, 2026 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant