From 79c8a15689551100c390ba19497f667088de7612 Mon Sep 17 00:00:00 2001
From: "James R. Cogley" <rick.cogley@esolia.co.jp>
Date: Wed, 29 Apr 2026 19:05:05 +0900
Subject: [PATCH] =?UTF-8?q?chore(ci):=20remove=20publish.yml=20=E2=80=94?=
 =?UTF-8?q?=20marquis=20is=20not=20on=20JSR?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The publish workflow was added in #4 on the assumption marquis would
publish to JSR like tedasuke. Two facts that emerged after merge:

1. @esolia/marquis was never created on JSR (the v0.3.4 release tag
   fired publish.yml and it failed: 'Following packages don't exist').
2. The intended consumer (Periodic) has migrated off Deno entirely
   onto Cloudflare Workers and uses bits-ui for components, so there
   is no live consumer of marquis through any channel today.

Marquis is parked code; the GitHub releases (currently v0.3.4) are
sufficient version markers. No publish target needed.

CI and security workflows remain — they prevent bitrot if/when marquis
gets revived as a UI option for non-SvelteKit Workers apps.

InfoSec: no security impact — workflow removal only. Security scanning
(trivy/gitleaks/semgrep/syft via vendored secrets-and-sast workflow)
unaffected.
---
 .github/workflows/publish.yml | 58 -----------------------------------
 1 file changed, 58 deletions(-)
 delete mode 100644 .github/workflows/publish.yml

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
deleted file mode 100644
index ca03a21..0000000
--- a/.github/workflows/publish.yml
+++ /dev/null
@@ -1,58 +0,0 @@
-name: Publish to JSR
-
-on:
-  push:
-    tags:
-      - 'v*'
-  workflow_dispatch:
-
-permissions:
-  contents: read
-  id-token: write
-
-jobs:
-  test:
-    name: Verify before publish
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Deno
-        uses: denoland/setup-deno@v2
-        with:
-          deno-version: '2.x'
-
-      - name: Format check
-        run: deno fmt --check
-
-      - name: Lint
-        run: deno lint
-
-      - name: Type check
-        run: deno check mod.ts
-
-      - name: Test
-        run: deno task test
-
-  publish:
-    name: Publish
-    needs: [test]
-    runs-on: ubuntu-latest
-    if: startsWith(github.ref, 'refs/tags/v')
-
-    permissions:
-      contents: read
-      id-token: write
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Deno
-        uses: denoland/setup-deno@v2
-        with:
-          deno-version: '2.x'
-
-      - name: Publish to JSR
-        # --allow-slow-types: tracked as debt — see issue for follow-up to add
-        # explicit types to ui/icon-button.ts (13 symbols missing types).
-        run: deno publish --allow-slow-types