From 35fd890b67b03b1d7024ba565dff367dfc857f12 Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Thu, 6 Aug 2026 04:35:26 +0000 Subject: [PATCH] =?UTF-8?q?chore(release):=20v0.24.2=20=E2=80=94=20add=20t?= =?UTF-8?q?he=20repository=20field=20provenance=20requires?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The v0.24.1 publish reached the registry and was rejected: E422 Error verifying sigstore provenance bundle: Failed to validate repository information: package.json: "repository.url" is "", expected to match "https://github.com/moshcoder/moshcode" from provenance package.json had no `repository` at all. npm checks the attestation's source repository against that field and refuses the tarball when they disagree — and "" disagrees with everything. It never came up publishing 0.24.0 by hand, because that publish had no --provenance to verify. Bumped to 0.24.2 rather than publishing 0.24.1 from this commit: provenance ties the tarball to the commit it was built from, so publishing 0.24.1 from a commit that is not tagged v0.24.1 would leave an attestation pointing at the wrong place. 0.24.1 stays unpublished — a hole in the sequence, which costs nothing. Also adds `homepage` and `bugs`, which npm shows on the package page and which were likewise missing. Co-Authored-By: Claude Opus 5 (1M context) --- package.json | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index 2e02ec1..9472eee 100644 --- a/package.json +++ b/package.json @@ -1,8 +1,16 @@ { "name": "moshcode", - "version": "0.24.1", + "version": "0.24.2", "type": "module", "description": "moshcode — a metal wrapper for coding engines and native UGig/CoinPay workflow CLIs, with OpenPRD and moshscript", + "repository": { + "type": "git", + "url": "git+https://github.com/moshcoder/moshcode.git" + }, + "homepage": "https://github.com/moshcoder/moshcode#readme", + "bugs": { + "url": "https://github.com/moshcoder/moshcode/issues" + }, "bin": { "moshcode": "./bin/moshcode.mjs", "moshscript": "./bin/moshscript.mjs"