kit 6.3.1
Fixed
- The 6.3.0 first-publish of the adapter SDK and plugins failed provenance
validation. npm's sigstore check requires each workspacepackage.jsonto
carry arepository.urlmatching the provenance source
(https://github.com/sandstream/kit); the field was empty, so the registry
rejectedsandstream-kit-adapter-sdkwith E422 and the eleven plugins never
ran (the CLI itself published). All thirteen manifests now declare
repository(with the monorepodirectoryfield); the publish step is
idempotent, so this tag completes the set the 6.3.0 tag started.
Full changelog: https://github.com/sandstream/kit/blob/v6.3.1/CHANGELOG.md
Verify this release:
git tag -v v6.3.1
npm audit signatures