Skip to content

RELEASING.md

Latest commit

 

History

History
22 lines (16 loc) · 990 Bytes

RELEASING.md

File metadata and controls

22 lines (16 loc) · 990 Bytes
Raw

Releasing fame-handler

  1. Confirm the release branch is clean and all CI checks pass.

  2. Update the version in package.json, regenerate package-lock.json with npm, and add release notes to CHANGELOG.md.

  3. Run the full local verification suite:

    npm run format:check
npm run lint
npm run typecheck
npm run test:coverage
npm run package:check

  4. Create and push an annotated vX.Y.Z tag.

  5. The release workflow publishes with npm provenance.

One-time npm setup

Configure npm trusted publishing for this repository and the release.yml workflow before creating the first tag. The workflow uses GitHub OIDC (id-token: write) and intentionally does not require an NPM_TOKEN. Confirm the npm package owner and trusted-publisher settings in npm before release.

If trusted publishing is unavailable for the target registry, stop and configure a least-privilege automation token outside this repository; do not add a token to source control.