ci: set YARN_NPM_PUBLISH_PROVENANCE to true by JounQin · Pull Request #523 · un-ts/prettier

JounQin · 2026-09-24T18:49:27Z

fix #522

Summary by CodeRabbit

Chores
- Published patch releases of prettier-plugin-sh and prettier-plugin-toml with npm provenance attestations.
- No changes to the packages’ user-facing functionality.

changeset-bot · 2026-09-24T18:49:32Z

🦋 Changeset detected

Latest commit: ebc067c

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
prettier-plugin-sh	Patch
prettier-plugin-toml	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

coderabbitai · 2026-09-24T18:49:45Z

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 41cb13db-9975-4967-9f7d-eabb0493a3f2

📥 Commits

Reviewing files that changed from the base of the PR and between ddb07bb and ebc067c.

📒 Files selected for processing (2)

.changeset/cozy-spoons-double.md
.github/workflows/release.yml

 ______________________________________________________________
< Security by obscurity? I'm about to become very 'unobscure'. >
 --------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

codesandbox-ci · 2026-09-24T18:49:57Z

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

cloudflare-workers-and-pages · 2026-09-24T18:49:59Z

Deploying prettier with Cloudflare Pages

Latest commit:	`ebc067c`
Status:	✅ Deploy successful!
Preview URL:	https://c9659abd.prettier-ans.pages.dev
Branch Preview URL:	https://jounqin-patch-1.prettier-ans.pages.dev

View logs

codecov · 2026-09-24T18:50:05Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.93%. Comparing base (ddb07bb) to head (ebc067c).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #523   +/-   ##
=======================================
  Coverage   91.93%   91.93%           
=======================================
  Files          13       13           
  Lines         434      434           
  Branches      112      112           
=======================================
  Hits          399      399           
  Misses         34       34           
  Partials        1        1

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-09-24T18:50:12Z

size-limit report 📦

Path	Size
packages/autocorrect/lib/index.js	477 B (0%)
packages/pkg/lib/index.js	758 B (0%)
packages/sh/lib/index.js	2.8 KB (0%)
packages/sql/lib/index.js	2.06 KB (0%)

pkg-pr-new · 2026-09-24T18:50:14Z

Open in StackBlitz

prettier-plugin-autocorrect

npm i https://pkg.pr.new/prettier-plugin-autocorrect@523

prettier-plugin-pkg

npm i https://pkg.pr.new/prettier-plugin-pkg@523

prettier-plugin-sh

npm i https://pkg.pr.new/prettier-plugin-sh@523

prettier-plugin-sql

npm i https://pkg.pr.new/prettier-plugin-sql@523

prettier-plugin-toml

npm i https://pkg.pr.new/prettier-plugin-toml@523

commit: ebc067c

codacy-production · 2026-09-24T18:50:25Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Coverage ∅ diff coverage · +0.00% coverage variation

Metric Results

Coverage variation ✅ +0.00% coverage variation (-1.00%)

Diff coverage ✅ ∅ diff coverage

View coverage diff in Codacy

Coverage variation details

Coverable lines Covered lines Coverage

Common ancestor commit (ddb07bb) 358 332 92.74%

Head commit (ebc067c) 358 (+0) 332 (+0) 92.74% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

Coverable lines Covered lines Diff coverage

Pull request (#523) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

github-actions · 2026-09-24T18:50:40Z

📊 Package size report `0%↑`

File	Before	After
`.changeset/cozy-spoons-double.md`	—	`123 B`
`.github/workflows/release.yml`	`1.3 kB`	^3%↑`1.3 kB`
Total _{(Includes all files)}	`4.2 MB`	^0%↑`4.2 MB`
Tarball size	`1.5 MB`	^0.01%↑`1.5 MB`

Unchanged files

File	Size
`.changeset/config.json`	`313 B`
`.changeset/README.md`	`510 B`
`.codesandbox/ci.json`	`38 B`
`.editorconfig`	`161 B`
`.gitattributes`	`152 B`
`.github/workflows/autofix.yml`	`963 B`
`.github/workflows/ci.yml`	`1.7 kB`
`.github/workflows/pkg-pr-new.yml`	`726 B`
`.github/workflows/pkg-size.yml`	`609 B`
`.github/workflows/size-limit.yml`	`856 B`
`.nano-staged.js`	`48 B`
`.nvmrc`	`6 B`
`.postcssrc.cjs`	`51 B`
`.prettierignore`	`23 B`
`.prettierrc`	`24 B`
`.remarkrc`	`159 B`
`.renovaterc`	`49 B`
`.simple-git-hooks.js`	`49 B`
`.size-limit.json`	`290 B`
`.yarn/plugins/plugin-prepare-lifecycle.cjs`	`202 B`
`.yarn/releases/yarn-4.18.0.cjs`	`3.8 MB`
`.yarnrc.yml`	`451 B`
`assets/pkg.svg`	`15.1 kB`
`assets/sh.png`	`14.4 kB`
`CHANGELOG.md`	`393 B`
`docs/App.tsx`	`1.2 kB`
`docs/global.css`	`321 B`
`docs/index.tsx`	`211 B`
`eslint.config.js`	`632 B`
`index.html`	`414 B`
`LICENSE`	`1.1 kB`
`package.json`	`3.6 kB`
`packages/autocorrect/CHANGELOG.md`	`2.2 kB`
`packages/autocorrect/index.d.cts`	`63 B`
`packages/autocorrect/LICENSE`	`1.1 kB`
`packages/autocorrect/package.json`	`1.1 kB`
`packages/autocorrect/README.md`	`4.0 kB`
`packages/autocorrect/src/index.ts`	`1.4 kB`
`packages/autocorrect/src/types.ts`	`78 B`
`packages/autocorrect/test/__snapshots__/fixtures.spec.ts.snap`	`4.7 kB`
`packages/autocorrect/test/fixtures.spec.ts`	`1.0 kB`
`packages/autocorrect/test/fixtures/test.css`	`189 B`
`packages/autocorrect/test/fixtures/test.go`	`470 B`
`packages/autocorrect/test/fixtures/test.html`	`1.1 kB`
`packages/autocorrect/test/fixtures/test.md`	`1.1 kB`
`packages/autocorrect/test/fixtures/test.py`	`368 B`
`packages/autocorrect/test/fixtures/test.rb`	`234 B`
`packages/autocorrect/test/fixtures/test0.js`	`453 B`
`packages/autocorrect/tsconfig.json`	`154 B`
`packages/pkg/CHANGELOG.md`	`14.3 kB`
`packages/pkg/index.d.cts`	`47 B`
`packages/pkg/LICENSE`	`16.7 kB`
`packages/pkg/package.json`	`1.0 kB`
`packages/pkg/README.md`	`7.2 kB`
`packages/pkg/src/index.ts`	`2.9 kB`
`packages/pkg/src/rules/files.ts`	`1.6 kB`
`packages/pkg/src/rules/object.ts`	`1.0 kB`
`packages/pkg/src/rules/sort.ts`	`5.5 kB`
`packages/pkg/src/types.ts`	`1.1 kB`
`packages/pkg/src/utils.ts`	`2.6 kB`
`packages/pkg/test/__snapshots__/engines.spec.ts.snap`	`158 B`
`packages/pkg/test/__snapshots__/files.spec.ts.snap`	`173 B`
`packages/pkg/test/__snapshots__/ignore-sort.spec.ts.snap`	`1.1 kB`
`packages/pkg/test/__snapshots__/sort-order-preset.spec.ts.snap`	`7.6 kB`
`packages/pkg/test/__snapshots__/sort-order.spec.ts.snap`	`996 B`
`packages/pkg/test/__snapshots__/test.spec.ts.snap`	`2.1 kB`
`packages/pkg/test/engines.spec.ts`	`417 B`
`packages/pkg/test/files.spec.ts`	`409 B`
`packages/pkg/test/fixtures/fixture1.json`	`1.0 kB`
`packages/pkg/test/fixtures/fixture2.json`	`895 B`
`packages/pkg/test/fixtures/fixture3.json`	`430 B`
`packages/pkg/test/ignore-sort.spec.ts`	`414 B`
`packages/pkg/test/sort-order-preset.spec.ts`	`708 B`
`packages/pkg/test/sort-order.spec.ts`	`442 B`
`packages/pkg/test/test.spec.ts`	`2.3 kB`
`packages/pkg/test/utils.spec.ts`	`3.4 kB`
`packages/pkg/tsconfig.json`	`154 B`
`packages/sh/CHANGELOG.md`	`16.4 kB`
`packages/sh/index.d.cts`	`45 B`
`packages/sh/LICENSE`	`1.1 kB`
`packages/sh/package.json`	`1.4 kB`
`packages/sh/README.md`	`10.5 kB`
`packages/sh/src/index.ts`	`14.1 kB`
`packages/sh/test/__snapshots__/fixtures.spec.ts.snap`	`29.4 kB`
`packages/sh/test/__snapshots__/shellscript.spec.ts.snap`	`394 B`
`packages/sh/test/error.spec.ts`	`484 B`
`packages/sh/test/fixtures.spec.ts`	`1.5 kB`
`packages/sh/test/fixtures/.dockerignore`	`108 B`
`packages/sh/test/fixtures/.env.development`	`29 B`
`packages/sh/test/fixtures/.husky/precommit`	`17 B`
`packages/sh/test/fixtures/.nvmrc`	`6 B`
`packages/sh/test/fixtures/.properties`	`177 B`
`packages/sh/test/fixtures/133.sh`	`5.2 kB`
`packages/sh/test/fixtures/162.sh`	`15.7 kB`
`packages/sh/test/fixtures/182.sh`	`1.9 kB`
`packages/sh/test/fixtures/191.sh`	`1.7 kB`
`packages/sh/test/fixtures/278.Dockerfile`	`32 B`
`packages/sh/test/fixtures/292.Dockerfile`	`95 B`
`packages/sh/test/fixtures/376.Dockerfile`	`217 B`
`packages/sh/test/fixtures/384.Dockerfile`	`51 B`
`packages/sh/test/fixtures/398.Dockerfile`	`64 B`
`packages/sh/test/fixtures/441.Dockerfile`	`219 B`
`packages/sh/test/fixtures/445.Dockerfile`	`198 B`
`packages/sh/test/fixtures/445.sh`	`105 B`
`packages/sh/test/fixtures/Dockerfile`	`394 B`
`packages/sh/test/fixtures/hosts`	`406 B`
`packages/sh/test/fixtures/jvm.options`	`162 B`
`packages/sh/test/fixtures/no-ext`	`38 B`
`packages/sh/test/fixtures/shell.sh`	`368 B`
`packages/sh/test/loc-functions.spec.ts`	`1.2 kB`
`packages/sh/test/options.spec.ts`	`645 B`
`packages/sh/test/parser.spec.ts`	`2.1 kB`
`packages/sh/test/zsh.spec.ts`	`1.3 kB`
`packages/sh/tsconfig.json`	`154 B`
`packages/sql/CHANGELOG.md`	`12.2 kB`
`packages/sql/index.d.cts`	`47 B`
`packages/sql/LICENSE`	`1.1 kB`
`packages/sql/package.json`	`1.3 kB`
`packages/sql/README.md`	`7.0 kB`
`packages/sql/src/index.ts`	`13.0 kB`
`packages/sql/test/__snapshots__/fixtures-eol.spec.ts.snap`	`886 B`
`packages/sql/test/__snapshots__/fixtures.spec.ts.snap`	`42.9 kB`
`packages/sql/test/__snapshots__/sql.spec.ts.snap`	`374 B`
`packages/sql/test/fixtures-eol.spec.ts`	`1.4 kB`
`packages/sql/test/fixtures-eol/556.sql`	`73 B`
`packages/sql/test/fixtures-eol/557.sql`	`69 B`
`packages/sql/test/fixtures-eol/558.sql`	`69 B`
`packages/sql/test/fixtures-eol/559.sql`	`73 B`
`packages/sql/test/fixtures.spec.ts`	`1.9 kB`
`packages/sql/test/fixtures/144.sql`	`68 B`
`packages/sql/test/fixtures/233.sql`	`68 B`
`packages/sql/test/fixtures/277.sql`	`88 B`
`packages/sql/test/fixtures/279.sql`	`106 B`
`packages/sql/test/fixtures/291.sql`	`1.2 kB`
`packages/sql/test/fixtures/334.sql`	`15 B`
`packages/sql/test/fixtures/405.sql`	`160 B`
`packages/sql/test/fixtures/495.sql`	`310 B`
`packages/sql/test/fixtures/basic.sql`	`120 B`
`packages/sql/test/sql.spec.ts`	`660 B`
`packages/sql/tsconfig.json`	`154 B`
`packages/toml/CHANGELOG.md`	`4.3 kB`
`packages/toml/index.d.cts`	`49 B`
`packages/toml/LICENSE`	`1.1 kB`
`packages/toml/package.json`	`1.2 kB`
`packages/toml/README.md`	`7.8 kB`
`packages/toml/src/config.ts`	`7.2 kB`
`packages/toml/src/discover.ts`	`6.2 kB`
`packages/toml/src/index.ts`	`3.7 kB`
`packages/toml/src/options.ts`	`5.3 kB`
`packages/toml/src/types.ts`	`2.4 kB`
`packages/toml/src/wasm.ts`	`1.3 kB`
`packages/toml/test/__snapshots__/fixtures.spec.ts.snap`	`842 B`
`packages/toml/test/config.spec.ts`	`3.3 kB`
`packages/toml/test/discover-global.spec.ts`	`2.5 kB`
`packages/toml/test/discover.spec.ts`	`4.9 kB`
`packages/toml/test/fixtures.spec.ts`	`857 B`
`packages/toml/test/fixtures/comments.toml`	`87 B`
`packages/toml/test/fixtures/fixture1.toml`	`162 B`
`packages/toml/test/fixtures/invalid.toml`	`16 B`
`packages/toml/test/fixtures/pyproject.toml`	`106 B`
`packages/toml/test/options.spec.ts`	`1.3 kB`
`packages/toml/tsconfig.json`	`154 B`
`public/android-chrome-192x192.png`	`3.5 kB`
`public/android-chrome-512x512.png`	`12.6 kB`
`public/apple-touch-icon.png`	`3.5 kB`
`public/favicon-16x16.png`	`309 B`
`public/favicon-32x32.png`	`547 B`
`public/favicon.ico`	`15.4 kB`
`public/site.webmanifest`	`288 B`
`README.md`	`6.8 kB`
`scripts/format.ts`	`593 B`
`scripts/languages.ts`	`3.3 kB`
`test/global.d.ts`	`103 B`
`test/tsconfig.json`	`223 B`
`tsconfig.base.json`	`153 B`
`tsconfig.json`	`275 B`
`vite.config.ts`	`544 B`
`vitest.config.ts`	`541 B`

_{🤖 This report was automatically generated by pkg-size-action}

Copilot

Copilot review overview

🟢 Approval recommended

No unresolved review issues were identified.

Review effort: Lite
Findings: None

What changed in this PR

Enables npm provenance attestations for packages published by the Changesets release workflow.

Changes:

Sets YARN_NPM_PUBLISH_PROVENANCE to true.
Uses the existing id-token: write permission.

File	Description
`.github/workflows/release.yml`	Enables provenance for npm publishing.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

sonarqubecloud · 2026-09-24T18:52:11Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Set YARN_NPM_PUBLISH_PROVENANCE to true

7603891

Copilot AI lite review requested due to automatic review settings September 24, 2026 18:49

Copilot started reviewing on behalf of JounQin September 24, 2026 18:50

View session

Copilot AI reviewed Sep 24, 2026

View reviewed changes

Create cozy-spoons-double.md

ebc067c

JounQin merged commit 3a41234 into master Sep 24, 2026
44 of 45 checks passed

JounQin deleted the JounQin-patch-1 branch September 24, 2026 19:02

github-actions Bot mentioned this pull request Sep 24, 2026

chore: release package(s) #524

Merged

Navigation Menu

Repository navigation

ci: set YARN_NPM_PUBLISH_PROVENANCE to true - #523

ci: set YARN_NPM_PUBLISH_PROVENANCE to true#523
JounQin merged 2 commits into
masterfrom
JounQin-patch-1

JounQin commented Sep 24, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

changeset-bot Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

codesandbox-ci Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 24, 2026

Uh oh!

pkg-pr-new Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

codacy-production Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

sonarqubecloud Bot commented Sep 24, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

JounQin commented Sep 24, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

changeset-bot Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

coderabbitai Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codesandbox-ci Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying prettier with Cloudflare Pages

Uh oh!

codecov Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions Bot commented Sep 24, 2026

size-limit report 📦

Uh oh!

pkg-pr-new Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codacy-production Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Up to standards ✅

Uh oh!

github-actions Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📊 Package size report 0%↑

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

🟢 Approval recommended

Uh oh!

sonarqubecloud Bot commented Sep 24, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

JounQin commented Sep 24, 2026 •

edited by coderabbitai Bot

Loading

changeset-bot Bot commented Sep 24, 2026 •

edited

Loading

coderabbitai Bot commented Sep 24, 2026 •

edited

Loading

codesandbox-ci Bot commented Sep 24, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Sep 24, 2026 •

edited

Loading

codecov Bot commented Sep 24, 2026 •

edited

Loading

pkg-pr-new Bot commented Sep 24, 2026 •

edited

Loading

codacy-production Bot commented Sep 24, 2026 •

edited

Loading

github-actions Bot commented Sep 24, 2026 •

edited

Loading

📊 Package size report `0%↑`