Kite 1672852136 ci(release): publish to npm via trusted publishing (#1732) ...

* ci(release): publish to npm via trusted publishing

Replace the NPM_TOKEN secret with GitHub OIDC token exchange, and add a
manually triggered job that verifies every package's trusted publisher
configuration without publishing anything.

npm only accepts an OIDC exchange from a cloud-hosted runner, so those two
jobs run on ubuntu-latest while the Go build matrix stays on self-hosted.

* fix(ci): harden npm trusted publishing checks

* fix(test): encode all slashes in release contract URLs

2026-10-13 17:45:38 +08:00

..

action-contract.test.js

fix(action): honor an explicit llm_protocol instead of forcing openai or anthropic (#1192)

2026-09-21 17:42:02 +08:00

check-plugin-contract.js

feat(plugin): add kimi code plugin (#1355)

2026-09-17 16:40:50 +08:00

check-plugin-contract.test.js

feat(plugin): add kimi code plugin (#1355)

2026-09-17 16:40:50 +08:00

check-translation-sync.js

docs: tidy repo root and refresh screenshots; fix highlights label alignment (#1260)

2026-09-15 13:24:36 +08:00

check-translation-sync.test.js

docs(ko): complete the Korean docs locale (#1084)

2026-08-27 19:45:11 +08:00

post-review-comments.js

fix(action): allow checkpoints after out-of-diff findings (#1524)

2026-09-23 11:50:04 +08:00

post-review-comments.test.js

fix(action): allow checkpoints after out-of-diff findings (#1524)

2026-09-23 11:50:04 +08:00

release-contract.test.js

ci(release): publish to npm via trusted publishing (#1732)

2026-10-13 17:45:38 +08:00