5 Commits

Author SHA1 Message Date
qcq01083097 1544af1f44 feat: Change the version in SKILL to an optional verification 2026-06-10 16:54:17 +08:00
若麒 04e7f30dc9 chore(release): bump version to 1.2.1 2026-06-09 00:35:26 +08:00
qcq01083097 00934973e9 feat: The version synchronization and skills generation are executed in the pre-commit hook 2026-06-08 17:41:33 +08:00
若麒 5d08bcb2a4 chore(release): drop attw from pack-scan 2026-06-05 10:41:51 +08:00
若麒 3693f7dacb feat(release): CI-driven publish pipeline via GitHub Actions + npm OIDC
Replace tools/release.mjs with two workflow_dispatch flows:

- stable: production environment gate (Required Reviewers) + lightweight git tag. Trusted Publishing (OIDC) removes the need for an npm token.
- channel beta: disposable 0.0.0-beta-<sha>-<date> versions on the corresponding dist-tag, no tag, no commit. Any collaborator can dispatch without npm credentials.

Pack-time scans via publint, attw, gitleaks; weekly Dependabot for npm + actions.
2026-06-04 23:02:38 +08:00