From e16c506b831a1a281766708dc8d9f4c61f3dfa66 Mon Sep 17 00:00:00 2001 From: Aaron Dewes Date: Wed, 3 Apr 2024 20:38:36 +0200 Subject: [PATCH 1/4] Enable provenance in package.json --- package.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index 5b48b19cc..53aa9b05a 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,8 @@ { "name": "@octokit/openapi-types", "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "version": "0.0.0-development", "description": "Generated TypeScript definitions based on GitHub's OpenAPI spec for https://api.github.com", From e01e3355b90e44cba8135582d7d4fe42bf7a4b47 Mon Sep 17 00:00:00 2001 From: Aaron Dewes Date: Wed, 3 Apr 2024 20:38:37 +0200 Subject: [PATCH 2/4] Add necessary permissions to the release workflow --- .github/workflows/release.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0ef365bfb..fd4838f4e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -6,6 +6,13 @@ name: Release - next - beta - "*.x" +# These are recommended by the semantic-release docs: https://github.com/semantic-release/npm#npm-provenance +permissions: + contents: write # to be able to publish a GitHub release + issues: write # to be able to comment on released issues + pull-requests: write # to be able to comment on released pull requests + id-token: write # to enable use of OIDC for npm provenance + jobs: release: name: release From d1a920add2bc51d2414f8b1d019992fbfb71ce3b Mon Sep 17 00:00:00 2001 From: wolfy1339 Date: Wed, 3 Apr 2024 15:03:43 -0400 Subject: [PATCH 3/4] Adapt for sub-packages --- package.json | 5 +---- packages/openapi-types-ghec/package.json | 3 ++- packages/openapi-types-ghes-3.10/package.json | 3 ++- packages/openapi-types-ghes-3.11/package.json | 3 ++- packages/openapi-types-ghes-3.12/package.json | 3 ++- packages/openapi-types-ghes-3.9/package.json | 3 ++- packages/openapi-types-github.ae/package.json | 3 ++- packages/openapi-types/package.json | 3 ++- scripts/generate-types.js | 1 + 9 files changed, 16 insertions(+), 11 deletions(-) diff --git a/package.json b/package.json index 53aa9b05a..496dc6aa5 100644 --- a/package.json +++ b/package.json @@ -1,9 +1,6 @@ { "name": "@octokit/openapi-types", - "publishConfig": { - "access": "public", - "provenance": true - }, + "private": true, "version": "0.0.0-development", "description": "Generated TypeScript definitions based on GitHub's OpenAPI spec for https://api.github.com", "repository": "github:octokit/openapi-types.ts", diff --git a/packages/openapi-types-ghec/package.json b/packages/openapi-types-ghec/package.json index 22150625d..096fb2bc2 100644 --- a/packages/openapi-types-ghec/package.json +++ b/packages/openapi-types-ghec/package.json @@ -7,7 +7,8 @@ "directory": "packages/openapi-types-ghec" }, "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "version": "0.0.0-development", "main": "", diff --git a/packages/openapi-types-ghes-3.10/package.json b/packages/openapi-types-ghes-3.10/package.json index 0e69c2fac..9fb9448b9 100644 --- a/packages/openapi-types-ghes-3.10/package.json +++ b/packages/openapi-types-ghes-3.10/package.json @@ -7,7 +7,8 @@ "directory": "packages/openapi-types-ghes-3.10" }, "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "version": "0.0.0-development", "main": "", diff --git a/packages/openapi-types-ghes-3.11/package.json b/packages/openapi-types-ghes-3.11/package.json index 50ca727eb..3a14d64b4 100644 --- a/packages/openapi-types-ghes-3.11/package.json +++ b/packages/openapi-types-ghes-3.11/package.json @@ -7,7 +7,8 @@ "directory": "packages/openapi-types-ghes-3.11" }, "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "version": "0.0.0-development", "main": "", diff --git a/packages/openapi-types-ghes-3.12/package.json b/packages/openapi-types-ghes-3.12/package.json index 80227e182..001b47f5c 100644 --- a/packages/openapi-types-ghes-3.12/package.json +++ b/packages/openapi-types-ghes-3.12/package.json @@ -7,7 +7,8 @@ "directory": "packages/openapi-types-ghes-3.12" }, "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "version": "0.0.0-development", "main": "", diff --git a/packages/openapi-types-ghes-3.9/package.json b/packages/openapi-types-ghes-3.9/package.json index 24499cca4..005b173aa 100644 --- a/packages/openapi-types-ghes-3.9/package.json +++ b/packages/openapi-types-ghes-3.9/package.json @@ -7,7 +7,8 @@ "directory": "packages/openapi-types-ghes-3.9" }, "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "version": "0.0.0-development", "main": "", diff --git a/packages/openapi-types-github.ae/package.json b/packages/openapi-types-github.ae/package.json index 5e1ae47ab..e02eb4616 100644 --- a/packages/openapi-types-github.ae/package.json +++ b/packages/openapi-types-github.ae/package.json @@ -7,7 +7,8 @@ "directory": "packages/openapi-types-github.ae" }, "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "version": "0.0.0-development", "main": "", diff --git a/packages/openapi-types/package.json b/packages/openapi-types/package.json index 7ed60dcfa..b23bcee4e 100644 --- a/packages/openapi-types/package.json +++ b/packages/openapi-types/package.json @@ -7,7 +7,8 @@ "directory": "packages/openapi-types" }, "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "version": "0.0.0-development", "main": "", diff --git a/scripts/generate-types.js b/scripts/generate-types.js index 5dae44bf2..4b2aeb860 100644 --- a/scripts/generate-types.js +++ b/scripts/generate-types.js @@ -13,6 +13,7 @@ run(); const packageDefaults = { publishConfig: { access: "public", + provenance: true }, version: "0.0.0-development", main: "", From f675ddecdc4670b644b8948d5bb16cecde4c9671 Mon Sep 17 00:00:00 2001 From: wolfy1339 Date: Wed, 3 Apr 2024 15:05:11 -0400 Subject: [PATCH 4/4] style: prettier --- scripts/generate-types.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/generate-types.js b/scripts/generate-types.js index 4b2aeb860..98d5c7164 100644 --- a/scripts/generate-types.js +++ b/scripts/generate-types.js @@ -13,7 +13,7 @@ run(); const packageDefaults = { publishConfig: { access: "public", - provenance: true + provenance: true, }, version: "0.0.0-development", main: "",