Skip to content

v0.2.8

Choose a tag to compare

View all tags
@kevinastuhuaman kevinastuhuaman released this 23 May 13:46
· 667 commits to main since this release
v0.2.8
d1da769
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • CI provenance attestation restored. v0.2.7's npm release lacks a provenance attestation (npm view trackly-cli@0.2.7 dist.attestations returns null) because the package was published manually from a laptop after the CI Publish workflow's first attempt failed on a pre-rotation NPM_TOKEN (issue #29). NPM_TOKEN was rotated to Automation type in the v0.2.7 cycle, but the workflow re-run hit E403 EPUBLISHCONFLICT since the version was already on npm. v0.2.8 is a no-code-change release whose sole purpose is to ship a clean attested tarball via the CI path. Verifies the rotated token works and closes the 3-release attestation gap (v0.2.5, v0.2.6, v0.2.7 are all unattested on npm).
Assets 2
Loading