若麒 9cd4adb26c refactor(release): merge stable + channel into single release.yml ...

npm Trusted Publishers only supports ONE (repo, workflow, environment)
tuple per package, so the two split workflows cannot both be granted
OIDC publish rights. Consolidate into release.yml with a mode input:

- mode=stable  -> publish-stable job, environment=production (reviewer
  gate), contents:write (push lightweight tag).
- mode=channel -> publish-channel job, no environment, contents:read.

Concurrency group keys on mode + channel so stable serializes globally
and channels serialize per dist-tag. Trusted Publisher entry should
now point at release.yml with environment left blank (matches both
the production-gated stable job and the env-less channel job).

2026-06-04 23:53:18 +08:00

..

ci.yml

fix(ci): build core/cli before pnpm run check

2026-06-04 23:16:15 +08:00

release.yml

refactor(release): merge stable + channel into single release.yml

2026-06-04 23:53:18 +08:00