From e07c5e2e523df860130238f94e419c3ed51345cf Mon Sep 17 00:00:00 2001 From: Omni Date: Mon, 4 May 2026 07:43:07 +0000 Subject: [PATCH 1/2] ci: enable OIDC npm publishing in production release workflow by Olga Shen & Omni --- .github/workflows/production-release.yml | 7 ++++--- .omni/af42200c-github-npm/memory.md | 22 ++++++++++++++++++++++ package.json | 4 ++++ 3 files changed, 30 insertions(+), 3 deletions(-) create mode 100644 .omni/af42200c-github-npm/memory.md diff --git a/.github/workflows/production-release.yml b/.github/workflows/production-release.yml index 4b19b67..f512361 100644 --- a/.github/workflows/production-release.yml +++ b/.github/workflows/production-release.yml @@ -43,11 +43,14 @@ jobs: needs: version-check if: needs.version-check.outputs.changed == 'true' runs-on: ubuntu-latest + permissions: + contents: read + id-token: write steps: - uses: actions/checkout@v4 - uses: actions/setup-node@v4 with: - node-version: 20 + node-version: 24 registry-url: 'https://registry.npmjs.org' scope: '@numbersprotocol' - name: Install dependencies @@ -56,8 +59,6 @@ jobs: run: MODE=prod npm run build - name: Deploy to NPM registry run: npm publish - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} purge-cdn-cache: needs: publish-npm diff --git a/.omni/af42200c-github-npm/memory.md b/.omni/af42200c-github-npm/memory.md new file mode 100644 index 0000000..719a347 --- /dev/null +++ b/.omni/af42200c-github-npm/memory.md @@ -0,0 +1,22 @@ +# Workspace Context + + + + +**Workspace root (absolute path):** `/home/workspaces/conversations/af42200c-bf31-4914-9f0b-af6eacf96600` + +## Repositories + +- **`capture-eye/`** — Branch: `omni/af42200c/capture-eye`, Remote: `numbersprotocol/capture-eye` + - [![](https://data.jsdelivr.com/v1/package/npm/@numbersprotocol/capture-eye/badge?style=rounded)](https://www.jsdelivr.com/package/npm/@numbersprotocol/capture-eye) + +## Environment & Tools + +- Local runtime observed: Node v22.13.0, npm 10.9.2; npm Trusted Publishing requires npm CLI 11.5.1+ and Node 22.14.0+. + +## Key Discoveries + +- `capture-eye/.github/workflows/production-release.yml` publishes `@numbersprotocol/capture-eye` to npm from the `publish-npm` job using npm Trusted Publishing/OIDC; npm package is configured with GitHub Actions trusted publisher. + +--- +_Last system refresh: 2026-05-04 07:40 UTC_ diff --git a/package.json b/package.json index ae74200..593349f 100644 --- a/package.json +++ b/package.json @@ -34,6 +34,10 @@ ], "author": "Numbers Protocol", "license": "GPL-3.0", + "repository": { + "type": "git", + "url": "git+https://github.com/numbersprotocol/capture-eye.git" + }, "dependencies": { "lit": "^3.0.0" }, From 3e424816951e7d6342b775500dfa3242a5f06c88 Mon Sep 17 00:00:00 2001 From: Omni Date: Mon, 4 May 2026 07:50:35 +0000 Subject: [PATCH 2/2] ci: use Node 24 in release workflows and CI matrix by Olga Shen & Omni --- .github/workflows/build.yml | 2 +- .github/workflows/dev-release.yml | 2 +- .github/workflows/production-release.yml | 4 ++-- .omni/af42200c-github-npm/memory.md | 3 ++- 4 files changed, 6 insertions(+), 5 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 1d0bd50..a145bb4 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -11,7 +11,7 @@ jobs: strategy: matrix: - node-version: [20.x, 22.x] + node-version: [20.x, 22.x, 24.x] # See supported Node.js release schedule at https://nodejs.org/en/about/releases/ steps: diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml index f4c38f8..98eab74 100644 --- a/.github/workflows/dev-release.yml +++ b/.github/workflows/dev-release.yml @@ -12,7 +12,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-node@v4 with: - node-version: 20 + node-version: 24 - name: Install dependencies run: npm ci - name: Build the project diff --git a/.github/workflows/production-release.yml b/.github/workflows/production-release.yml index f512361..ad25a21 100644 --- a/.github/workflows/production-release.yml +++ b/.github/workflows/production-release.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-node@v4 with: - node-version: 20 + node-version: 24 registry-url: https://npm.pkg.github.com/ scope: '@numbersprotocol' - name: Install dependencies @@ -77,7 +77,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-node@v4 with: - node-version: 20 + node-version: 24 - name: Install dependencies run: npm ci - name: Build the project diff --git a/.omni/af42200c-github-npm/memory.md b/.omni/af42200c-github-npm/memory.md index 719a347..f50513c 100644 --- a/.omni/af42200c-github-npm/memory.md +++ b/.omni/af42200c-github-npm/memory.md @@ -13,10 +13,11 @@ ## Environment & Tools - Local runtime observed: Node v22.13.0, npm 10.9.2; npm Trusted Publishing requires npm CLI 11.5.1+ and Node 22.14.0+. +- GitHub Actions release workflows use Node 24; CI matrix covers Node 20.x, 22.x, and 24.x. ## Key Discoveries - `capture-eye/.github/workflows/production-release.yml` publishes `@numbersprotocol/capture-eye` to npm from the `publish-npm` job using npm Trusted Publishing/OIDC; npm package is configured with GitHub Actions trusted publisher. --- -_Last system refresh: 2026-05-04 07:40 UTC_ +_Last system refresh: 2026-05-04 07:48 UTC_