From af8ec7daec059c983d5186cd37b40781399224d4 Mon Sep 17 00:00:00 2001 From: Lachlan Collins <1667261+lachlancollins@users.noreply.github.com> Date: Sun, 7 Dec 2025 02:11:20 +1100 Subject: [PATCH 1/5] ci: prepare for trusted publishing --- .github/FUNDING.yml | 1 - .github/workflows/autofix.yml | 4 ++-- .github/workflows/pr.yml | 18 ++++++++++++--- .github/workflows/release.yml | 3 +-- examples/svelte/dynamic/src/App.svelte | 6 ++--- nx.json | 5 +++- package.json | 12 ++++------ packages/angular-virtual/package.json | 2 +- packages/lit-virtual/package.json | 2 +- packages/lit-virtual/src/index.ts | 3 +-- packages/react-virtual/package.json | 2 +- packages/solid-virtual/package.json | 2 +- packages/svelte-virtual/package.json | 2 +- packages/virtual-core/package.json | 2 +- packages/vue-virtual/package.json | 2 +- pnpm-lock.yaml | 32 +++++++++++++------------- tsconfig.json | 2 +- 17 files changed, 55 insertions(+), 45 deletions(-) diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml index 508727c1..fd99b3b1 100644 --- a/.github/FUNDING.yml +++ b/.github/FUNDING.yml @@ -1,2 +1 @@ github: tannerlinsley -custom: https://youtube.com/tannerlinsley diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index 40091beb..364cde60 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -18,13 +18,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5.0.0 + uses: actions/checkout@v6.0.1 with: fetch-depth: 0 - name: Setup Tools uses: tanstack/config/.github/setup@main - name: Fix formatting - run: pnpm prettier:write + run: pnpm format - name: Apply fixes uses: autofix-ci/action@551dded8c6cc8a1054039c8bc0b8b48c51dfc6ef with: diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 7223d30e..49f9c401 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -19,13 +19,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5.0.0 + uses: actions/checkout@v6.0.1 with: fetch-depth: 0 - name: Setup Tools uses: tanstack/config/.github/setup@main - name: Get base and head commits for `nx affected` - uses: nrwl/nx-set-shas@v4.3.0 + uses: nrwl/nx-set-shas@v4.4.0 with: main-branch-name: main - name: Install Playwright browsers @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5.0.0 + uses: actions/checkout@v6.0.1 with: fetch-depth: 0 - name: Setup Tools @@ -46,3 +46,15 @@ jobs: run: pnpm run build:all - name: Publish Previews run: pnpx pkg-pr-new publish --pnpm --compact './packages/*' --template './examples/*/*' + provenance: + name: Provenance + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v6.0.1 + with: + fetch-depth: 0 + - name: Check Provenance + uses: danielroe/provenance-action@v0.1.1 + with: + fail-on-downgrade: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7d8c5e13..3d4a61e4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,7 +23,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5.0.0 + uses: actions/checkout@v6.0.1 with: fetch-depth: 0 - name: Setup Tools @@ -41,4 +41,3 @@ jobs: title: 'ci: Version Packages' env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} diff --git a/examples/svelte/dynamic/src/App.svelte b/examples/svelte/dynamic/src/App.svelte index 21e802ac..b73b876f 100644 --- a/examples/svelte/dynamic/src/App.svelte +++ b/examples/svelte/dynamic/src/App.svelte @@ -10,9 +10,9 @@

These components are using dynamic sizes. This means that each - element's exact dimensions are unknown when rendered. An estimated dimension - is used as the initial measurement, then this measurement is readjusted on the - fly as each element is rendered. + element's exact dimensions are unknown when rendered. An estimated dimension is + used as the initial measurement, then this measurement is readjusted on the fly + as each element is rendered.