From 3034248e53d1102445c86e85d760d7c5f2b8f74d Mon Sep 17 00:00:00 2001 From: Gerard Date: Mon, 1 Jun 2026 15:10:48 +0200 Subject: [PATCH] chore: bump fs-theme + fs-translation 0.1.1 (provenance attestation) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit fs-theme and fs-translation are still published only at unattested 0.1.0 — they predate the `NPM_CONFIG_PROVENANCE` workflow hardening, so consumers pinning `^0.1.0` resolve to provenance-unattested releases (Sapper STALE-3 / QM F-5). This is a no-functional-change patch bump that re-publishes both through the now-provenance-enabled OIDC pipeline so the published artifacts ship SLSA attestations. - packages/theme/package.json: 0.1.0 → 0.1.1 - packages/translation/package.json: 0.1.0 → 0.1.1 - CHANGELOG.md created for each (sibling packages carry them; these did not), dated 2026-06-01 to the actual release date. - package-lock.json: version-field sync only (2 lines). No `src/` changes. Both are leaf packages (no internal @script-development peers) — pure leaf bumps, no cascade-tax peer-range widening. On merge this WILL publish fs-theme@0.1.1 + fs-translation@0.1.1 via the OIDC pipeline (the trigger matches packages/theme/package.json + packages/translation/package.json). Co-Authored-By: Claude Opus 4.8 (1M context) --- package-lock.json | 4 ++-- packages/theme/CHANGELOG.md | 7 +++++++ packages/theme/package.json | 2 +- packages/translation/CHANGELOG.md | 7 +++++++ packages/translation/package.json | 2 +- 5 files changed, 18 insertions(+), 4 deletions(-) create mode 100644 packages/theme/CHANGELOG.md create mode 100644 packages/translation/CHANGELOG.md diff --git a/package-lock.json b/package-lock.json index 20c1286..b949105 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10156,7 +10156,7 @@ }, "packages/theme": { "name": "@script-development/fs-theme", - "version": "0.1.0", + "version": "0.1.1", "license": "MIT", "devDependencies": { "happy-dom": "^20.9.0", @@ -10190,7 +10190,7 @@ }, "packages/translation": { "name": "@script-development/fs-translation", - "version": "0.1.0", + "version": "0.1.1", "license": "MIT", "dependencies": { "string-ts": "^2.3.1" diff --git a/packages/theme/CHANGELOG.md b/packages/theme/CHANGELOG.md new file mode 100644 index 0000000..fdc98c4 --- /dev/null +++ b/packages/theme/CHANGELOG.md @@ -0,0 +1,7 @@ +# @script-development/fs-theme + +## 0.1.1 — 2026-06-01 + +### Patch Changes + +- Provenance attestation — republish through the OIDC/provenance pipeline. The `0.1.0` release predates the `NPM_CONFIG_PROVENANCE` workflow hardening, so consumers pinning `^0.1.0` resolved to provenance-unattested releases. This patch carries no functional change; its sole purpose is to re-publish through the now-provenance-enabled pipeline so the published artifact ships an SLSA attestation. diff --git a/packages/theme/package.json b/packages/theme/package.json index 6bb7791..8a5eb29 100644 --- a/packages/theme/package.json +++ b/packages/theme/package.json @@ -1,6 +1,6 @@ { "name": "@script-development/fs-theme", - "version": "0.1.0", + "version": "0.1.1", "description": "Reactive theme service factory with dark/light mode, system preference detection, and storage persistence", "homepage": "https://packages.script.nl/packages/theme", "license": "MIT", diff --git a/packages/translation/CHANGELOG.md b/packages/translation/CHANGELOG.md new file mode 100644 index 0000000..8b6c315 --- /dev/null +++ b/packages/translation/CHANGELOG.md @@ -0,0 +1,7 @@ +# @script-development/fs-translation + +## 0.1.1 — 2026-06-01 + +### Patch Changes + +- Provenance attestation — republish through the OIDC/provenance pipeline. The `0.1.0` release predates the `NPM_CONFIG_PROVENANCE` workflow hardening, so consumers pinning `^0.1.0` resolved to provenance-unattested releases. This patch carries no functional change; its sole purpose is to re-publish through the now-provenance-enabled pipeline so the published artifact ships an SLSA attestation. diff --git a/packages/translation/package.json b/packages/translation/package.json index b9e45a4..c861211 100644 --- a/packages/translation/package.json +++ b/packages/translation/package.json @@ -1,6 +1,6 @@ { "name": "@script-development/fs-translation", - "version": "0.1.0", + "version": "0.1.1", "description": "Type-safe reactive i18n service for Vue 3 — multi-locale, dot-notation keys, parameter interpolation, memoized computed refs", "homepage": "https://packages.script.nl/packages/translation", "license": "MIT",