ci: harden workflows, add npm provenance publishing and supply-chain checks - #31

Merged

ericmmartin merged 3 commits into

mainfrom

chore/ci-hardening-provenance

Jul 30, 2026

Commits on Jul 30, 2026

ci: harden workflows, add npm provenance publishing and supply-chain checks
ericmmartin
committed
7b2084f
fix(ci): rename release dry-run input to dry_run
ericmmartin
committed
10cac7e
ci(release): authenticate npm publish via trusted publishing (OIDC)
ericmmartin
committed
bc356a7