Skip to content

Verify npm registry integrity after accepted beta publication - #18

Merged
samuelho-dev merged 2 commits into
mainfrom
ci/verified-npm-publishing-20261105
Nov 5, 2026
Merged

samuelho-dev merged 2 commits into
mainfrom
ci/verified-npm-publishing-20261105

Conversation

@samuelho-dev

Copy link
Copy Markdown
Owner

Retains exact-source CI artifact checks, OIDC, npm-public environment and explicit beta dispatch. Adds post-publication registry version and sha512 integrity verification before success reporting. Actionlint passed for the changed workflow. The actual new verification shell passed against downloaded beta.9 registry artifact; no npm publication performed. Owner-side current npm trust/environment settings remain unverified.

@coderabbitai

coderabbitai Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

Important

  • Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 98d70d66-29f5-404c-834f-36fc98197b15
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@samuelho-dev

Copy link
Copy Markdown
Owner Author

Verification: changed workflow passes actionlint; actual post-publish registry verification shell passed against the published beta.9 tarball and its sha512 integrity. Hosted npm-package CI gate passed. supplementary/chart remain queued because repository runner coordinator-runners-runner-8fdrk is offline (runner API checked). Leaving this PR unmerged rather than bypassing the existing gates. npm-public workflow dispatch and beta channel are unchanged; owner-side current npm trusted publisher/environment settings are not accessible from this session.

@samuelho-dev
samuelho-dev merged commit 9e273c5 into main Nov 5, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant