Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: kennyjpowers/claude-flow
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.0.1
Choose a base ref
...
head repository: kennyjpowers/claude-flow
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.1.0
Choose a head ref
  • 7 commits
  • 6 files changed
  • 3 contributors

Commits on Nov 22, 2025

  1. feat: enable OIDC publishing and remove token workflow 

    Enable the OIDC-based release workflow now that npm Trusted Publishers is configured.
Remove the temporary token-based workflow (release-token.yml).

Changes:
- Enable automatic release on push to main
- Keep workflow_dispatch for manual testing
- Remove release-token.yml (no longer needed)

This completes the migration to secure, token-free publishing with automatic
provenance attestations (SLSA Level 2).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
    @kennyjpriester @claude
    kennyjpriester and claude committed Nov 22, 2025
    Configuration menu
    Copy the full SHA
    5d1f195 View commit details
    Browse the repository at this point in the history

  2. fix: enable npm provenance for OIDC publishing 

    Add provenance: true to @semantic-release/npm configuration to enable
OIDC-based publishing without NPM_TOKEN. This uses GitHub Actions OIDC
with npm Trusted Publishers for automatic provenance attestations.

Fixes: ENONPMTOKEN error when publishing with OIDC

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
    @kennyjpriester @claude
    kennyjpriester and claude committed Nov 22, 2025
    Configuration menu
    Copy the full SHA
    4ded4fc View commit details
    Browse the repository at this point in the history

  3. fix: update semantic-release to latest with OIDC support 

    Update semantic-release from v22.0.0 to v25.0.2 and @semantic-release/npm
to v13.1.2 which includes OIDC trusted publishing support (merged Oct 2025).

This enables token-free publishing via npm Trusted Publishers without
requiring NPM_TOKEN environment variable.

References:
- semantic-release/npm#1015 (enable oidc publishing)
- semantic-release/npm#1017 (promote to stable)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
    @kennyjpriester @claude
    kennyjpriester and claude committed Nov 22, 2025
    Configuration menu
    Copy the full SHA
    0440f6a View commit details
    Browse the repository at this point in the history

  4. fix: update Node version requirements for semantic-release v25 

    semantic-release v25.0.2 requires Node >=22.14.0 or >=24.10.0.

Changes:
- Update test matrix: Node 20,22 → 22.14.0,24
- Update release job: Node 22 → 22.14.0
- Commit package-lock.json from previous update

This fixes EBADENGINE errors in CI.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
    @kennyjpriester @claude
    kennyjpriester and claude committed Nov 22, 2025
    Configuration menu
    Copy the full SHA
    ddc22fa View commit details
    Browse the repository at this point in the history

  5. chore: simplify test matrix to single Node version 

    Reduce test matrix from 6 jobs (3 OS × 2 Node) to 3 jobs (3 OS × 1 Node).
Testing on Node 22.14.0 only since it meets semantic-release v25 requirements.

This reduces CI time while maintaining cross-platform coverage.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
    @kennyjpriester @claude
    kennyjpriester and claude committed Nov 22, 2025
    Configuration menu
    Copy the full SHA
    bedafdf View commit details
    Browse the repository at this point in the history

  6. fix: use npm install instead of npm ci for complex dependencies 

    Switch from npm ci to npm install to avoid persistent lock file sync errors
with semantic-release v25's complex dependency tree.

Issue: npm ci fails with missing internal packages (nopt, abbrev, npm-bundled)
even with freshly regenerated package-lock.json.

This is a known workaround for npm 10+ with complex dependency configurations.

References:
- https://stackoverflow.com/q/76387479
- npm/cli#5125

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
    @kennyjpriester @claude
    kennyjpriester and claude committed Nov 22, 2025
    Configuration menu
    Copy the full SHA
    22ebc10 View commit details
    Browse the repository at this point in the history

  7. chore(release): 1.1.0 [skip ci] 

    # [1.1.0](v1.0.1...v1.1.0) (2025-11-22)

### Bug Fixes

* enable npm provenance for OIDC publishing ([4ded4fc](4ded4fc))
* update Node version requirements for semantic-release v25 ([ddc22fa](ddc22fa))
* update semantic-release to latest with OIDC support ([0440f6a](0440f6a)), closes [semantic-release/npm#1015](semantic-release/npm#1015) [semantic-release/npm#1017](semantic-release/npm#1017)
* use npm install instead of npm ci for complex dependencies ([22ebc10](22ebc10))

### Features

* enable OIDC publishing and remove token workflow ([5d1f195](5d1f195))
    @semantic-release-bot
    semantic-release-bot committed Nov 22, 2025
    Configuration menu
    Copy the full SHA
    4b7847b View commit details
    Browse the repository at this point in the history
Loading