mirror of
https://github.com/Routstr/routstrd.git
synced 2026-10-05 12:28:23 +00:00
Add a tag-gated publish-npm job that publishes to npm with provenance using OIDC trusted publishing (no token). Triggered on the same v* tag push that builds the binaries: a release: published trigger would never fire, since the release job creates the GitHub Release with the default GITHUB_TOKEN and GitHub suppresses workflow runs from that token. Add the repository/bugs fields required by npm provenance.