[PR #6272] [MERGED] chore(release): add provenance flag to publish #6557

Closed
opened 2026-03-13 13:03:14 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/6272
Author: @himself65
Created: 11/24/2025
Status: Merged
Merged: 11/24/2025
Merged by: @himself65

Base: canaryHead: himself65/2025/11/24/ci


📝 Commits (6)

  • 05afae0 chore(release): add provenance flag to publish commands in release scripts
  • 88a645d ci: fix
  • 13fb8fd Update .github/workflows/release.yml
  • 7570229 ci: fix
  • 3c5c249 ci: do same thing for preview.yml
  • f20869d Revert "ci: do same thing for preview.yml"

📊 Changes

2 files changed (+6 additions, -5 deletions)

View changed files

📝 .github/workflows/release.yml (+3 -2)
📝 package.json (+3 -3)

📄 Description

Fixes: https://github.com/better-auth/better-auth/issues/6261


Summary by cubic

Enable npm provenance for all release publishes to verify package origin and improve supply-chain security, fixing better-auth/better-auth#6261. Adds --provenance to all pnpm publish commands and grants id-token: write in the release workflow for OIDC attestation.

Written for commit f20869d419. Summary will update automatically on new commits.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/6272 **Author:** [@himself65](https://github.com/himself65) **Created:** 11/24/2025 **Status:** ✅ Merged **Merged:** 11/24/2025 **Merged by:** [@himself65](https://github.com/himself65) **Base:** `canary` ← **Head:** `himself65/2025/11/24/ci` --- ### 📝 Commits (6) - [`05afae0`](https://github.com/better-auth/better-auth/commit/05afae0db6c70f1f9386f2cfaa73783be1d25252) chore(release): add provenance flag to publish commands in release scripts - [`88a645d`](https://github.com/better-auth/better-auth/commit/88a645d2b365b26b1b20a4edf37f64caf6414f27) ci: fix - [`13fb8fd`](https://github.com/better-auth/better-auth/commit/13fb8fd2823bbce21f60ac347fd2fe6719da086a) Update .github/workflows/release.yml - [`7570229`](https://github.com/better-auth/better-auth/commit/757022985ed5b895d2bc19ab14686bce1f2287c2) ci: fix - [`3c5c249`](https://github.com/better-auth/better-auth/commit/3c5c249c044e8cd86f943b1e9b9c5697ceb317d3) ci: do same thing for preview.yml - [`f20869d`](https://github.com/better-auth/better-auth/commit/f20869d4190eb2333895e319a217db03f1edb0ef) Revert "ci: do same thing for preview.yml" ### 📊 Changes **2 files changed** (+6 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/release.yml` (+3 -2) 📝 `package.json` (+3 -3) </details> ### 📄 Description Fixes: https://github.com/better-auth/better-auth/issues/6261 <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Enable npm provenance for all release publishes to verify package origin and improve supply-chain security, fixing better-auth/better-auth#6261. Adds --provenance to all pnpm publish commands and grants id-token: write in the release workflow for OIDC attestation. <sup>Written for commit f20869d4190eb2333895e319a217db03f1edb0ef. Summary will update automatically on new commits.</sup> <!-- End of auto-generated description by cubic. --> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-03-13 13:03:14 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#6557