Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,11 @@
# Changelog

## Unreleased
## 1.1.0

- GitHub Action (`uses: continuous-actions/go-tokenless@v1`): check mode fails CI when npm publishing still relies on a stored token, with annotations and a job summary listing the fixes; `mode: report` only annotates.
- Error guides at https://continuous-actions.github.io/go-tokenless/ (ENEEDAUTH, E404 on PUT, E422 repository.url, leftover tokens, the 2FA-bypass notice), linked from the README and `llms.txt`.
- The Claude plugin moved to `claude-plugin/`, with an icon and privacy, support and docs links. The project has a privacy policy (`PRIVACY.md`).
- Lowercase org name `continuous-actions` in docs and links.

## 1.0.0

Expand Down
2 changes: 1 addition & 1 deletion action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ runs:
if [ -n "$READ_TOKEN" ]; then args+=(--read-token "$READ_TOKEN"); fi
# Run from outside the repository so npx always uses the published package.
cd "$RUNNER_TEMP"
npx --yes go-tokenless@1.0.0 "${args[@]}" > "$RUNNER_TEMP/go-tokenless-plan.json" || [ $? -eq 1 ]
npx --yes go-tokenless@1.1.0 "${args[@]}" > "$RUNNER_TEMP/go-tokenless-plan.json" || [ $? -eq 1 ]
- name: Report
id: check
shell: bash
Expand Down
4 changes: 2 additions & 2 deletions claude-plugin/.claude-plugin/plugin.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "go-tokenless",
"displayName": "go-tokenless",
"icon": "./.claude-plugin/icon.png",
"version": "1.0.0",
"version": "1.1.0",
"description": "Move npm publishing in GitHub Actions from NPM_TOKEN to trusted publishing (OIDC): an Agent Skill plus an MCP server that plans and applies the workflow changes.",
"author": {
"name": "Continuous-Actions",
Expand All @@ -26,7 +26,7 @@
"command": "npx",
"args": [
"-y",
"go-tokenless@1.0.0",
"go-tokenless@1.1.0",
"mcp"
]
}
Expand Down
4 changes: 2 additions & 2 deletions gemini-extension.json
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
{
"name": "go-tokenless",
"version": "1.0.0",
"version": "1.1.0",
"description": "Move npm publishing in GitHub Actions from NPM_TOKEN to trusted publishing (OIDC).",
"contextFileName": "skills/go-tokenless/SKILL.md",
"mcpServers": {
"go-tokenless": {
"command": "npx",
"args": [
"-y",
"go-tokenless@1.0.0",
"go-tokenless@1.1.0",
"mcp"
]
}
Expand Down
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "go-tokenless",
"version": "1.0.0",
"version": "1.1.0",
"description": "Switch npm publishing in GitHub Actions from NPM_TOKEN to trusted publishing (OIDC) with one command. CLI, MCP server and Agent Skill.",
"license": "MIT",
"type": "module",
Expand Down
4 changes: 2 additions & 2 deletions server.json
Original file line number Diff line number Diff line change
Expand Up @@ -7,12 +7,12 @@
"url": "https://github.com/Continuous-Actions/go-tokenless",
"source": "github"
},
"version": "1.0.0",
"version": "1.1.0",
"packages": [
{
"registryType": "npm",
"identifier": "go-tokenless",
"version": "1.0.0",
"version": "1.1.0",
"transport": { "type": "stdio" },
"packageArguments": [{ "type": "positional", "value": "mcp" }]
}
Expand Down
Loading