Skip to content

v1.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Aug 20:59
· 16 commits to main since this release
v1.1.0
4e42c95
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Minor Changes

  • #3 bb768a0 Thanks @GarthDB! - Add npm provenance support for enhanced supply-chain security

    • Add --provenance flag to changeset publish command
    • Configure publishConfig.provenance: true in package.json
    • Add id-token: write permission to release workflow
    • Enables verifiable attestations for published packages

    This implements npm provenance as described in https://docs.npmjs.com/generating-provenance-statements, providing:

    • Verifiable link to package source code and build instructions
    • Public transparency log via Sigstore
    • Enhanced supply-chain security for package consumers
    • Automatic attestation generation during CI/CD publishing

Patch Changes

  • #3 8587e72 Thanks @GarthDB! - Improve configuration documentation and add GitHub PR template

    • Add npx as the recommended installation method to resolve IDE compatibility issues
    • Provide three configuration options: npx (recommended), global, and local development
    • Update example configuration to use npx by default
    • Add comprehensive GitHub PR template with checklists and sections
    • Reference continuedev/continue#4791 about NPX availability problems in IDEs

    This makes the MCP server more reliable across different IDE environments and provides better guidance for contributors.

Assets 2
Loading