Mirror of https://github.com/roostorg/coop
github.com/roostorg/coop
fix: Add repository field to published packages for npm provenance (#135)
npm's sigstore provenance verification requires `repository.url` in
package.json to match the GitHub repo URL from the provenance bundle.
Both `@roostorg/types` and `@roostorg/db-migrator` were missing this
field, causing publish to fail with a 422 error.
+26
-15
+15
-14
migrator/package-lock.json
+15
-14
migrator/package-lock.json
···
1
1
{
2
2
"name": "@roostorg/db-migrator",
3
-
"version": "1.0.8",
3
+
"version": "1.0.9",
4
4
"lockfileVersion": 2,
5
5
"requires": true,
6
6
"packages": {
7
7
"": {
8
8
"name": "@roostorg/db-migrator",
9
-
"version": "1.0.8",
9
+
"version": "1.0.9",
10
10
"license": "ISC",
11
11
"dependencies": {
12
12
"@total-typescript/ts-reset": "^0.5.1",
···
465
465
}
466
466
},
467
467
"node_modules/sequelize": {
468
-
"version": "6.32.1",
469
-
"resolved": "https://registry.npmjs.org/sequelize/-/sequelize-6.32.1.tgz",
470
-
"integrity": "sha512-3Iv0jruv57Y0YvcxQW7BE56O7DC1BojcfIrqh6my+IQwde+9u/YnuYHzK+8kmZLhLvaziRT1eWu38nh9yVwn/g==",
468
+
"version": "6.37.8",
469
+
"resolved": "https://registry.npmjs.org/sequelize/-/sequelize-6.37.8.tgz",
470
+
"integrity": "sha512-HJ0IQFqcTsTiqbEgiuioYFMSD00TP6Cz7zoTti+zVVBwVe9fEhev9cH6WnM3XU31+ABS356durAb99ZuOthnKw==",
471
471
"funding": [
472
472
{
473
473
"type": "opencollective",
474
474
"url": "https://opencollective.com/sequelize"
475
475
}
476
476
],
477
+
"license": "MIT",
477
478
"dependencies": {
478
479
"@types/debug": "^4.1.8",
479
480
"@types/validator": "^13.7.17",
480
481
"debug": "^4.3.4",
481
-
"dottie": "^2.0.4",
482
+
"dottie": "^2.0.6",
482
483
"inflection": "^1.13.4",
483
484
"lodash": "^4.17.21",
484
485
"moment": "^2.29.4",
485
486
"moment-timezone": "^0.5.43",
486
-
"pg-connection-string": "^2.6.0",
487
+
"pg-connection-string": "^2.6.1",
487
488
"retry-as-promised": "^7.0.4",
488
-
"semver": "^7.5.1",
489
+
"semver": "^7.5.4",
489
490
"sequelize-pool": "^7.1.0",
490
491
"toposort-class": "^1.0.1",
491
492
"uuid": "^8.3.2",
···
1072
1073
}
1073
1074
},
1074
1075
"sequelize": {
1075
-
"version": "6.32.1",
1076
-
"resolved": "https://registry.npmjs.org/sequelize/-/sequelize-6.32.1.tgz",
1077
-
"integrity": "sha512-3Iv0jruv57Y0YvcxQW7BE56O7DC1BojcfIrqh6my+IQwde+9u/YnuYHzK+8kmZLhLvaziRT1eWu38nh9yVwn/g==",
1076
+
"version": "6.37.8",
1077
+
"resolved": "https://registry.npmjs.org/sequelize/-/sequelize-6.37.8.tgz",
1078
+
"integrity": "sha512-HJ0IQFqcTsTiqbEgiuioYFMSD00TP6Cz7zoTti+zVVBwVe9fEhev9cH6WnM3XU31+ABS356durAb99ZuOthnKw==",
1078
1079
"requires": {
1079
1080
"@types/debug": "^4.1.8",
1080
1081
"@types/validator": "^13.7.17",
1081
1082
"debug": "^4.3.4",
1082
-
"dottie": "^2.0.4",
1083
+
"dottie": "^2.0.6",
1083
1084
"inflection": "^1.13.4",
1084
1085
"lodash": "^4.17.21",
1085
1086
"moment": "^2.29.4",
1086
1087
"moment-timezone": "^0.5.43",
1087
-
"pg-connection-string": "^2.6.0",
1088
+
"pg-connection-string": "^2.6.1",
1088
1089
"retry-as-promised": "^7.0.4",
1089
-
"semver": "^7.5.1",
1090
+
"semver": "^7.5.4",
1090
1091
"sequelize-pool": "^7.1.0",
1091
1092
"toposort-class": "^1.0.1",
1092
1093
"uuid": "^8.3.2",
+6
-1
migrator/package.json
+6
-1
migrator/package.json
···
1
1
{
2
2
"name": "@roostorg/db-migrator",
3
-
"version": "1.0.8",
3
+
"version": "1.0.9",
4
4
"description": "CLI tool for managing database migrations and seeding. Designed for modern scalable systems.",
5
5
"type": "module",
6
6
"scripts": {
···
15
15
"files": [
16
16
"build"
17
17
],
18
+
"repository": {
19
+
"type": "git",
20
+
"url": "https://github.com/roostorg/coop",
21
+
"directory": "migrator"
22
+
},
18
23
"author": "Roostorg",
19
24
"license": "ISC",
20
25
"dependencies": {
+5
types/package.json
+5
types/package.json
···
10
10
"prepublishOnly": "npm run build",
11
11
"test": "npm run build && node --test transpiled/test_scripts/"
12
12
},
13
+
"repository": {
14
+
"type": "git",
15
+
"url": "https://github.com/roostorg/coop",
16
+
"directory": "types"
17
+
},
13
18
"author": "Roostorg",
14
19
"files": [
15
20
"transpiled"