若麒 3693f7dacb feat(release): CI-driven publish pipeline via GitHub Actions + npm OIDC ...

Replace tools/release.mjs with two workflow_dispatch flows:

- stable: production environment gate (Required Reviewers) + lightweight git tag. Trusted Publishing (OIDC) removes the need for an npm token.
- channel beta: disposable 0.0.0-beta-<sha>-<date> versions on the corresponding dist-tag, no tag, no commit. Any collaborator can dispatch without npm credentials.

Pack-time scans via publint, attw, gitleaks; weekly Dependabot for npm + actions.

2026-06-04 23:02:38 +08:00

1.4 KiB

Raw Permalink Blame History

View Raw