Skip to content

ci(release): enable npm, crates.io, and pypi publishing for v0.1.0#9

Merged
upsetbit merged 3 commits into
masterfrom
ci/enable-release-publishing
Jul 3, 2026
Merged

ci(release): enable npm, crates.io, and pypi publishing for v0.1.0#9
upsetbit merged 3 commits into
masterfrom
ci/enable-release-publishing

Conversation

@upsetbit

@upsetbit upsetbit commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Enables the first release of the three registry artifacts by activating the
previously stubbed publish steps in the non-Go release trains.

Changes

  • release-crate.yml — publish codexcw to crates.io with
    CARGO_REGISTRY_TOKEN (kept the --dry-run verify step ahead of it).
  • release-npm.yml — publish @c3-oss/codexcw + the 7 per-platform
    packages with npm provenance (NPM_TOKEN). Uses
    napi pre-publish --skip-gh-release then npm publish --ignore-scripts; the
    --ignore-scripts stops the prepublishOnly hook from re-running pre-publish
    with its default --gh-release in a token-less job.
  • release-pypi.yml — publish codexcw via PyPI Trusted Publishing (OIDC),
    no token.
  • bindings/node/README.md — added so the npm package renders a page
    instead of a blank one; included in the package files.

Release procedure (after merge)

Cut the train tags sequentially against the merged commit on master, watching
each publish before the next: rust-v0.1.0py-v0.1.0node-v0.1.0.

Versions are already 0.1.0 across all manifests; no version bump needed.

🤖 Generated with Claude Code

upsetbit and others added 3 commits July 3, 2026 20:17
Activate the previously stubbed publish steps in the three non-Go release
trains, matching the configured credentials: crates.io via
CARGO_REGISTRY_TOKEN, npm via NPM_TOKEN with provenance, and PyPI via
Trusted Publishing (OIDC).

The npm publish runs `napi pre-publish --skip-gh-release` to ship the
per-platform packages, then `npm publish --ignore-scripts` for the main
package; --ignore-scripts stops the prepublishOnly hook from re-running
pre-publish with its default --gh-release in a token-less job.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Give @c3-oss/codexcw a README so it renders on npmjs.com instead of a blank
page, and include it in the published `files`.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Move every workflow off GitHub-hosted runners onto Blacksmith (2vcpu Linux,
6vcpu macOS, 2vcpu Windows), mirroring the c3-oss/mcp-plane convention: matrix
jobs keep `matrix.os` as the display/cache-key label and add a `matrix.runs-on`
Blacksmith label. The quality job passes GITHUB_TOKEN to lychee to avoid
anonymous GitHub rate limits.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@upsetbit upsetbit merged commit d2f39de into master Jul 3, 2026
11 checks passed
@upsetbit upsetbit deleted the ci/enable-release-publishing branch July 3, 2026 23:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant