chore(monorepo): 🤖 Independent Package Publisher (NPM)#953

Open

punkbit wants to merge 17 commits into

chore/monorepo-changeset-root-setupfrom

chore/monorepo-package-releaser

Commits on Apr 2, 2026

chore: 🤖 move click-ui into packages/click-ui
punkbit
committed
chore: 🤖 make monorepo (yarn workspaces)
punkbit
committed
chore: 🤖 update workflows
punkbit
committed
chore: 🤖 setup changeset for monorepository architecture
punkbit
committed
chore: 🤖 add monorepo package release (initial, copied from a concurrent branch now deprecated)
punkbit
committed
docs: 📝 monorepo package release distinction
punkbit
committed
chore: 🤖 add notes
punkbit
committed
fix: 🐛 Fixed both references (lines 259 and 272) from monorepo-package-publisher.yml → monorepo-package-release.yml
punkbit
committed
refactor(security): 💡 string inputs (package, confirm_package, confirm_branch) now flow through env: blocks
punkbit
committed
chore: 🤖 Added a new GitHub Actions Security block with the rule explaining why direct interpolation of string inputs into run: blocks is dangerous, a before/after code example, and a note that cho…
punkbit
committed
refactor: 💡 extended validation step condition to latest
punkbit
committed
docs: 📝 Added a paragraph after the existing trusted publisher guidance
punkbit
committed
fix: 🐛 Two steps fixed: check version on npm (lines 169-171): moved package_name and version to env: extract changelog (lines 203-206): moved version, package_path, and changelog_file to env:
punkbit
committed
chore: 🤖 Removed the Upgrade npm for OIDC support step. setup-node@v6 with node-version: '23.x' already ships npm 10.x, which has full --provenance support — no upgrade needed
punkbit
committed
chore: 🤖 update create github release step
punkbit
committed
fix: 🐛 conflict resolution
punkbit
committed
fix: 🐛 issue was the resolutions field was in packages/click-ui/package.json instead of the root package.json
punkbit
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(monorepo): 🤖 Independent Package Publisher (NPM)#953

chore(monorepo): 🤖 Independent Package Publisher (NPM)#953
punkbit wants to merge 17 commits into
chore/monorepo-changeset-root-setupfrom
chore/monorepo-package-releaser

Commits on Apr 2, 2026

chore: 🤖 move click-ui into packages/click-ui

chore: 🤖 make monorepo (yarn workspaces)

chore: 🤖 update workflows

chore: 🤖 setup changeset for monorepository architecture

chore: 🤖 add monorepo package release (initial, copied from a concurrent branch now deprecated)

docs: 📝 monorepo package release distinction

chore: 🤖 add notes

fix: 🐛 Fixed both references (lines 259 and 272) from monorepo-package-publisher.yml → monorepo-package-release.yml

refactor(security): 💡 string inputs (package, confirm_package, confirm_branch) now flow through env: blocks

chore: 🤖 Added a new GitHub Actions Security block with the rule explaining why direct interpolation of string inputs into run: blocks is dangerous, a before/after code example, and a note that cho…

refactor: 💡 extended validation step condition to latest

docs: 📝 Added a paragraph after the existing trusted publisher guidance

fix: 🐛 Two steps fixed: check version on npm (lines 169-171): moved package_name and version to env: extract changelog (lines 203-206): moved version, package_path, and changelog_file to env:

chore: 🤖 Removed the Upgrade npm for OIDC support step. setup-node@v6 with node-version: '23.x' already ships npm 10.x, which has full --provenance support — no upgrade needed

chore: 🤖 update create github release step

fix: 🐛 conflict resolution

fix: 🐛 issue was the resolutions field was in packages/click-ui/package.json instead of the root package.json