[iamfj]

Summary

• Configure the release workflow for npm Trusted Publishing by removing the long-lived npm token path.
• Add Node.js 24 setup before semantic-release so npm can use OIDC publishing.
• Normalize npm package metadata for the repository URL and CLI bin path.
• Keep package publishing public while relying on GitHub Actions trusted publishing for provenance.

Validation

• bun run check
• bun run test
• bun run pack:dry-run

Security checklist

• The change doesn't add install-time scripts or unexpected network access.
• The change doesn't log secrets, tokens, environment values, or raw local state.
• The change keeps filesystem writes scoped to documented paths.
• GitHub Actions permissions remain least-privilege.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
pi-stack-ops	Ready	Preview, Comment	Jun 15, 2026 3:02pm

[github-actions]

🎉 This PR is included in version 1.0.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀