Unlist mispublished historical package versions

[woksin]

Workflow-dispatch republishing of historical versions 0.2.0-0.7.0 built current main rather than their immutable tags. NuGet packages therefore carry repository commit bfe7eb185... (v0.9.0 source) instead of each historical tag.

Affected:

• Cratis.CritterStack.Screenplay 0.2.0-0.7.0

Remediation:

• unlist affected immutable versions; do not attempt overwrite;
• keep correct 0.1.0 and 0.8.0+ listed;
• preserve GitHub release assets for historical evidence;
• document exact source-commit verification for future historical publication.

Detected by comparing NuGet nuspec repository commits to Git tags after trusted publishing activation.

[woksin]

Automated unlisting was attempted with a one-time branch workflow using the trusted-publishing OIDC temp key (run 32598145213). NuGet returned 403: the temp key can push but has no delete/unlist permission. Owner action is required in nuget.org UI: unlist Cratis.CritterStack.Screenplay versions 0.2.0 through 0.7.0. Keep correct 0.1.0 and 0.8.0+.

[cratis-stagehand]

Thanks for opening this - it has been received and will be looked at.

---

Posted by Stagehand (AI) - an autonomous agent, not a person. Review accordingly.