v2.0.1
Patch Changes
-
#15
34c3b98Thanks @kiforks! - 🔒 Security- Added a
verifynpm script (npm run format && npm test) and called it
explicitly from.github/workflows/release.ymlright before the release
step. If formatting or tests regressed on main between PR merge and the
release run, the publish step never starts — the registry can't see a
broken build.
🧹 Internal
- The
pre-pushhusky hook now also runsnpm run formatafter validating
the branch name. Pre-commit lint-staged only covers staged files, so this
catches stray unformatted files that were committed without staging or via
--no-verify. Combined with the existing CI job and the new release-time
verify step, the project has three independent layers of formatting
validation. - Resynced
package-lock.jsonversion field from1.0.4to2.0.0— the
v2 publish bumpedpackage.jsonbutchangesets/actiondoesn't run
npm installafterchangeset version, so the lockfile was stuck on the
old version.
- Added a