Skip to content

1.0.1 — trusted publishing (OIDC)

Choose a tag to compare

@RINGOLINK RINGOLINK released this 13 Sep 03:14
· 10 commits to main since this release

Packaging-only release: the npm pipeline now publishes through npm trusted publishing (OIDC).

  • .github/workflows/publish.yml publishes via npm trusted publishing (OIDC) — no NPM_TOKEN secret is stored in the repository, and provenance is generated automatically (this release carries a signed provenance statement: https://search.sigstore.dev/?logIndex=2813654666).
  • The workflow now fails fast when the npm CLI is older than 11.5.1, or when the pushed tag does not match the package.json version.
  • No runtime change: the launcher, host half and browser half are identical to 1.0.0.