Skip to content

Conversation

@chrisrohr
Copy link
Contributor

Summary

  • Migrate from manual versioning to automated releases using semantic-release
  • Configure NPM trusted publishing with OIDC for secure, tokenless npm authentication
  • Add release workflow with manual trigger (workflow_dispatch), test matrix (Node 20, 22, 24), and provenance support
  • Update dependabot to use conventional commit prefixes (chore(deps))

Changes

  • package.json: Set version to 0.0.0-semantically-released, add repository field, publishConfig with public access and provenance, add semantic-release devDependency
  • .releaserc.json: Standard configuration with commit-analyzer, release-notes-generator, npm, and github plugins
  • .github/workflows/release.yml: Manual release workflow with OIDC permissions for NPM trusted publishing
  • .github/dependabot.yml: Add chore(deps) prefix for conventional commits

Test plan

  • Verify build workflow passes on this PR
  • After merge, configure NPM trusted publishing for the package on npmjs.com
  • Manually trigger the release workflow to publish v1.0.0

🤖 Generated with Claude Code

BREAKING CHANGE: This migrates from manual versioning to automated
releases using semantic-release with NPM's OIDC-based trusted publishing.

Changes:
- Update package.json with repository, publishConfig, and semantic-release
- Add .releaserc.json with standard plugins
- Add release.yml workflow with OIDC permissions for NPM provenance
- Update dependabot.yml to use conventional commit prefixes

Co-Authored-By: Claude Opus 4.5 <[email protected]>
@chrisrohr chrisrohr merged commit 4d5f1ac into main Jan 18, 2026
3 checks passed
@chrisrohr chrisrohr deleted the feat/semantic-release branch January 18, 2026 19:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants