Kite 1672852136 ci(release): publish to npm via trusted publishing (#1732) ... * ci(release): publish to npm via trusted publishing Replace the NPM_TOKEN secret with GitHub OIDC token exchange, and add a manually triggered job that verifies every package's trusted publisher configuration without publishing anything. npm only accepts an OIDC exchange from a cloud-hosted runner, so those two jobs run on ubuntu-latest while the Go build matrix stays on self-hosted. * fix(ci): harden npm trusted publishing checks * fix(test): encode all slashes in release contract URLs		2026-10-13 17:45:38 +08:00
..
github-actions	ci(release): publish to npm via trusted publishing (#1732)	2026-10-13 17:45:38 +08:00
publish	chore: add SPDX license headers and automated verification (#740)	2026-08-05 21:26:27 +08:00
add-license.sh	chore: extend license and english-only gates to kt, py and css (#1407)	2026-09-18 15:18:36 +08:00
install.js	chore: add SPDX license headers and automated verification (#740)	2026-08-05 21:26:27 +08:00
platform.js	chore: add SPDX license headers and automated verification (#740)	2026-08-05 21:26:27 +08:00
update.js	fix(npm): hide the updater's console window on Windows (#1406)	2026-09-18 15:56:56 +08:00
verify-action-pins.sh	fix(ci): pin workflow action references to full commit SHAs (#856)	2026-09-22 11:57:31 +08:00
verify-english-only.go	chore: drop the last TEMPORARY english-only exemption (#1445)	2026-09-19 11:55:48 +08:00
verify-license.sh	chore: extend license and english-only gates to kt, py and css (#1407)	2026-09-18 15:18:36 +08:00
version.js	fix(updater): discard stale version hints (#720)	2026-08-17 22:35:46 +08:00
version.test.js	fix(updater): discard stale version hints (#720)	2026-08-17 22:35:46 +08:00