Skip to content

fix(s3): add repository metadata required for provenance; idempotent bump - #7

Merged
mcollina merged 1 commit into
mainfrom
fix/s3-repository-metadata
Oct 14, 2026
Merged

mcollina merged 1 commit into
mainfrom
fix/s3-repository-metadata

Conversation

@mcollina

Copy link
Copy Markdown
Member

Problem

The 0.1.3 release published @platformatic/sqlite-js-stream but failed on the S3 package:

Failed to publish package @platformatic/sqlite-js-stream-s3@0.1.3 (status 422):
Error verifying sigstore provenance bundle: Failed to validate repository information:
package.json: "repository.url" is "", expected to match "https://github.com/platformatic/sqlite-js-stream" from provenance

Changes

  • packages/backend-s3/package.json: add repository (with directory: packages/backend-s3), homepage, bugs and author.
  • scripts/bump-version.mjs: exit cleanly when the version is already set instead of failing on an empty git commit. This lets a release whose bump landed but whose publish failed be re-dispatched with the same version.

Finishing the 0.1.3 release

After merging, dispatch Publish release with version: 0.1.3. The bump is a no-op, and pnpm -r publish skips the root package (0.1.3 is already on npm) and publishes only @platformatic/sqlite-js-stream-s3@0.1.3. I checked this locally: pnpm -r publish --dry-run targets only the S3 package.

🤖 Generated with Claude Code

https://claude.ai/code/session_0162xGMZU6wtdADEwqhqNqnY

…bump

Publishing @platformatic/sqlite-js-stream-s3 with --provenance failed with
`"repository.url" is ""`: npm verifies the provenance bundle against the
package's repository field. Add repository (with directory), homepage,
bugs and author.

bump-version.mjs now exits cleanly when the version is already set, so a
release whose bump landed but whose publish failed can be re-dispatched
with the same version; pnpm -r publish skips versions already on npm.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0162xGMZU6wtdADEwqhqNqnY
@mcollina
mcollina merged commit cd7bdd1 into main Oct 14, 2026
3 checks passed
@mcollina
mcollina deleted the fix/s3-repository-metadata branch October 14, 2026 07:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant