open-code-review/scripts/github-actions
Kite 1672852136
ci(release): publish to npm via trusted publishing (#1732)
* ci(release): publish to npm via trusted publishing

Replace the NPM_TOKEN secret with GitHub OIDC token exchange, and add a
manually triggered job that verifies every package's trusted publisher
configuration without publishing anything.

npm only accepts an OIDC exchange from a cloud-hosted runner, so those two
jobs run on ubuntu-latest while the Go build matrix stays on self-hosted.

* fix(ci): harden npm trusted publishing checks

* fix(test): encode all slashes in release contract URLs
2026-10-13 17:45:38 +08:00
..
action-contract.test.js fix(action): honor an explicit llm_protocol instead of forcing openai or anthropic (#1192) 2026-09-21 17:42:02 +08:00
check-plugin-contract.js feat(plugin): add kimi code plugin (#1355) 2026-09-17 16:40:50 +08:00
check-plugin-contract.test.js feat(plugin): add kimi code plugin (#1355) 2026-09-17 16:40:50 +08:00
check-translation-sync.js docs: tidy repo root and refresh screenshots; fix highlights label alignment (#1260) 2026-09-15 13:24:36 +08:00
check-translation-sync.test.js docs(ko): complete the Korean docs locale (#1084) 2026-08-27 19:45:11 +08:00
post-review-comments.js fix(action): allow checkpoints after out-of-diff findings (#1524) 2026-09-23 11:50:04 +08:00
post-review-comments.test.js fix(action): allow checkpoints after out-of-diff findings (#1524) 2026-09-23 11:50:04 +08:00
release-contract.test.js ci(release): publish to npm via trusted publishing (#1732) 2026-10-13 17:45:38 +08:00