From e678cad27cef8e4b1ae5ec291ae1e9c9570e0f28 Mon Sep 17 00:00:00 2001 From: Mao Nakamoto <41178744+maonakamoto@users.noreply.github.com> Date: Sat, 5 Sep 2026 17:28:43 +0200 Subject: [PATCH] chore(deps): sitekit from git tag to npm release @bitbaum/sitekit@^0.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Same alias pattern as camille: sitekit -> npm:@bitbaum/sitekit@^0.3.0, zero source edits. Drops the codeload allowBuilds entry and exempts the fresh package from the minimum-release-age window. Also formats .github/workflows/auto-merge.yml (quote style) — it predated format:check locally and CI never runs prettier, so the repo's verify gate was red on a pristine checkout. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01WqKqMnHQHSmkGFfc5t7Rxn --- .github/workflows/auto-merge.yml | 6 +++--- package.json | 2 +- pnpm-lock.yaml | 32 ++++++++++++++++++-------------- pnpm-workspace.yaml | 6 +++++- 4 files changed, 27 insertions(+), 19 deletions(-) diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml index 8db8d3b..411b016 100644 --- a/.github/workflows/auto-merge.yml +++ b/.github/workflows/auto-merge.yml @@ -14,10 +14,10 @@ name: Auto-merge on: workflow_run: - workflows: ["CI"] + workflows: ['CI'] types: [completed] schedule: - - cron: "*/10 * * * *" + - cron: '*/10 * * * *' workflow_dispatch: {} # Declared on the CALLER as well as inside the reusable workflow: a called @@ -36,4 +36,4 @@ jobs: base_branch: main ci_workflow: ci.yml # SPACE-separated: the sweep word-splits this. - rearm_workflows: "ci.yml publish.yml" + rearm_workflows: 'ci.yml publish.yml' diff --git a/package.json b/package.json index ac7bf73..0a03d34 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "next": "16.3.4", "react": "19.2.8", "react-dom": "19.2.8", - "sitekit": "github:bitbaum/sitekit#v0.3.0" + "sitekit": "npm:@bitbaum/sitekit@^0.3.0" }, "devDependencies": { "@tailwindcss/postcss": "^4", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 297d050..db3ecf0 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -18,8 +18,8 @@ importers: specifier: 19.2.8 version: 19.2.8(react@19.2.8) sitekit: - specifier: github:bitbaum/sitekit#v0.3.0 - version: https://codeload.github.com/bitbaum/sitekit/tar.gz/9122b6b6c62a35aeefcb5508d1da9914b0435367(react@19.2.8) + specifier: npm:@bitbaum/sitekit@^0.3.0 + version: '@bitbaum/sitekit@0.3.0(react@19.2.8)' devDependencies: '@tailwindcss/postcss': specifier: ^4 @@ -128,6 +128,12 @@ packages: resolution: {integrity: sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==} engines: {node: '>=6.9.0'} + '@bitbaum/sitekit@0.3.0': + resolution: {integrity: sha512-DnIwW3F92PEXFW4h9VSW2q+HS4fYSlEX/TnjIUjQ+Pcjja38hRN5eo45B1c6nDOiXl2/8v9V7yRYjtLQ1zG6pQ==} + engines: {node: '>=20'} + peerDependencies: + react: '>=18' + '@emnapi/core@1.10.0': resolution: {integrity: sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==} @@ -1950,13 +1956,6 @@ packages: resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==} engines: {node: '>= 0.4'} - sitekit@https://codeload.github.com/bitbaum/sitekit/tar.gz/9122b6b6c62a35aeefcb5508d1da9914b0435367: - resolution: {gitHosted: true, integrity: sha512-O/L7IXQXDUXhoGbrv7nXo8O+14YLQwuXIUHvSqLthC9y/0ZFNnmy62qN8QTV+uimjI9CpAp1fvI6HKgYLpbxCg==, tarball: https://codeload.github.com/bitbaum/sitekit/tar.gz/9122b6b6c62a35aeefcb5508d1da9914b0435367} - version: 0.3.0 - engines: {node: '>=20'} - peerDependencies: - react: '>=18' - source-map-js@1.2.1: resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==} engines: {node: '>=0.10.0'} @@ -2136,6 +2135,9 @@ packages: zod@4.4.3: resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==} + zod@4.5.4: + resolution: {integrity: sha512-sC95tT5iHHH9gtpj6A81kh+NEaRAUFN+qlUPDUbRfOMvNf5QCBqsb3WgvnpVtK5Y+4UfA6KqufotuTvMGiTlsA==} + snapshots: '@alloc/quick-lru@5.2.0': {} @@ -2240,6 +2242,11 @@ snapshots: '@babel/helper-string-parser': 7.29.7 '@babel/helper-validator-identifier': 7.29.7 + '@bitbaum/sitekit@0.3.0(react@19.2.8)': + dependencies: + react: 19.2.8 + zod: 4.5.4 + '@emnapi/core@1.10.0': dependencies: '@emnapi/wasi-threads': 1.2.1 @@ -4109,11 +4116,6 @@ snapshots: side-channel-map: 1.0.1 side-channel-weakmap: 1.0.2 - sitekit@https://codeload.github.com/bitbaum/sitekit/tar.gz/9122b6b6c62a35aeefcb5508d1da9914b0435367(react@19.2.8): - dependencies: - react: 19.2.8 - zod: 4.4.3 - source-map-js@1.2.1: {} stable-hash@0.0.5: {} @@ -4369,3 +4371,5 @@ snapshots: zod: 4.4.3 zod@4.4.3: {} + + zod@4.5.4: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index baf0fc9..428d994 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,6 +1,10 @@ # pnpm 11 blocks dependency build scripts by default; allow only what we trust. allowBuilds: - 'sitekit@https://codeload.github.com/bitbaum/sitekit/tar.gz/9122b6b6c62a35aeefcb5508d1da9914b0435367': true esbuild: true sharp: true unrs-resolver: true + +# Own package published to npm <24h ago; exempt from the minimum-release-age +# supply-chain window. Redundant once the release ages past the window. +minimumReleaseAgeExclude: + - '@bitbaum/sitekit'