From 4dc4608a82394b81a69d4be9c1d48ef4b5791903 Mon Sep 17 00:00:00 2001 From: James Maes Date: Tue, 29 Sep 2026 15:19:36 -0500 Subject: [PATCH 1/2] ci: pin corrected trusted npm publisher (QQQ #915) --- .circleci/config.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index c0439ca..1753450 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -3,7 +3,7 @@ version: 2.1 orbs: - qqq-orb: kingsrook/qqq-orb@0.6.7 + qqq-orb: kingsrook/qqq-orb@0.6.8 workflows: -- 2.54.0 From 18fee3e97a422c5995d86a0f2444498e69dc2c76 Mon Sep 17 00:00:00 2001 From: James Maes Date: Tue, 29 Sep 2026 15:20:48 -0500 Subject: [PATCH 2/2] docs: match the corrected npm publisher pin (QQQ #915) --- docs/npm-publishing.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/npm-publishing.md b/docs/npm-publishing.md index ab691d1..6e8b792 100644 --- a/docs/npm-publishing.md +++ b/docs/npm-publishing.md @@ -1,6 +1,6 @@ # npm publishing -CircleCI publishes `@qrunio/qqq-frontend-core` with npm Trusted Publishing using `kingsrook/qqq-orb@0.6.7` and `cimg/node:24.21`. In the package Settings on npmjs.com, add a **CircleCI** trusted publisher with the values below and explicitly allow **npm publish** (the staged-only default does not run this pipeline). Existing workflow branch filters and dist-tags remain in place. +CircleCI publishes `@qrunio/qqq-frontend-core` with npm Trusted Publishing using `kingsrook/qqq-orb@0.6.8` and `cimg/node:24.21`. In the package Settings on npmjs.com, add a **CircleCI** trusted publisher with the values below and explicitly allow **npm publish** (the staged-only default does not run this pipeline). Existing workflow branch filters and dist-tags remain in place. | npm field | Value | | --- | --- | -- 2.54.0