| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
ci: harden release with OIDC trusted publishing (TanStack-style, tokenless) (#258) * style: inline files array in package.json to satisfy biome The release version bump left "files": ["dist"] formatted multi-line, which biome check rejects. CI's test:ci script doesn't run biome check (only the local pre-commit hook does), so this slipped onto main. * ci: harden release with OIDC trusted publishing (no tokens), drop PAT Replaces the PAT-based approach with npm Trusted Publishing (OIDC), mirroring TanStack's release flow. This removes long-lived publishing secrets entirely and addresses the security review findings. - npm auth via OIDC: add .npmrc provenance=true + id-token:write, and remove the NPM_TOKEN secret usage. Requires a trusted publisher to be configured for react-router-devtools on npmjs.com. - Drop the RELEASE_GITHUB_TOKEN PAT; the changesets action uses only the ephemeral GITHUB_TOKEN (to open the Release PR + create GH releases). - Pin all action versions to commit SHAs (supply-chain hardening). - Guard the job to this repo + main only (covers workflow_dispatch), so a dispatch can never publish from a non-main ref or a fork. - Pin Node 24 (npm 11) so OIDC works if pnpm delegates to npm publish. - Drop unused actions:write permission; add concurrency (no cancel). - Keep workflow_dispatch as a guarded manual recovery valve. | 4 个月前 | |
Create FUNDING.yml (#60) | 3 年前 | |
Feat/migrate to tanstack devtools (#236) * tanstack migration init * remove tailwind for goober * update deps * migrate to event client * make ui look much nicer on event tab * better ui * improve events screen * swap to evenets for server info * removed custom behavior and rely on tanstack devtools for open source and uses event client for route info * removed detached mode * remove hydration diff detector * remove errors tab * remove bippy * add middleware logs and events * fix bugs * update ui * ui improvements * remove settings tab * remove settings tab * cleanup of old code * add back in plugins and cleanup package exports * improve ui and logs * update docs * fix * docs(changeset): migrated to TanStack Devtools * changeset * add license * fix bugs * fix bugs * fix bugs * update docs for data mode * update styles | 11 个月前 | |
Migrate docs to our template (#221) * new docs site, migrated to pnpm and nx * remove nx * fix action * fix action * test * test * test * add .npmrc * fix rc * fix deployment * fix deployment? * fix deployment? * fix * update dockerfile * biome removed, updated pnpm version in dockerfile * deployment fix? * deployment fix? * deployment fix? * deployment fix? * deployment fix? * deployment fix? * deployment fix? * deployment fix? * updates in yml, generate-docs, dockerfile * updates in yml, generate-docs, dockerfile * update package-json * update package-json * UI tw fixes * comments * small fix * small UI fix * UI fixes * small comment in dockerfile * UI small fix * UI fixes * small fix in docs * docs update --------- Co-authored-by: abrulic <almina@forge42.dev> | 1 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 4 个月前 | ||
| 3 年前 | ||
| 11 个月前 | ||
| 1 年前 |