Skip to content

v3.0.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Jul 19:05
· 12 commits to master since this release
v3.0.3
4ad5ba2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • 6b10499: Restore the npm provenance attestation.

    3.0.2 was published without one: the release switched to changeset publish, which delegates to pnpm's native publish,
    and pnpm reads the provenance flag from .npmrc rather than the NPM_CONFIG_PROVENANCE env var the workflow was
    setting. This release turns provenance on in .npmrc, so the published package is signed again — the same SLSA
    attestation 3.0.1 carried. No code changes; the package contents are identical to 3.0.2.

Assets 2
Loading