Colby MchenryandClaude Fable 5 2b0b4b587e ci(release): publish npm packages with provenance and attest release bundles (#1296) ...

Every published artifact is now cryptographically verifiable as built by
this repo's Release workflow: npm publishes carry npm provenance (OIDC,
shows the Provenance badge on npmjs.com), and the GitHub Release bundles
+ SHA256SUMS get signed build attestations via
actions/attest-build-provenance, verifiable with
`gh attestation verify <file> -R colbymchenry/codegraph`.

pack-npm.sh now writes a repository field into the generated shim and
per-platform package.jsons — npm --provenance refuses to publish without
one matching the repo — and the root package.json gains the same field.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-07-15 19:10:34 -05:00

..

add-lang

feat: add Lua and Luau language support (#273)

2026-05-21 09:28:00 -05:00

agent-eval

feat(extraction): add COBOL language support (.cbl/.cob/.cpy) (#590, #648) (#1161)

2026-07-03 09:17:53 -05:00

build-bundle.sh

fix(mcp): reap the server when its launcher is killed during startup (#1185) (#1199)

2026-07-07 08:45:12 -05:00

extract-release-notes.mjs

chore(release): refine release-notes extractor (#181)

2026-05-19 12:05:59 -05:00

local-install.sh

feat(installer): multi-target — Claude Code, Cursor, Codex CLI, opencode (#162)

2026-05-17 19:26:09 -05:00

npm-sdk.js

feat(npm): restore programmatic/embedded SDK API (#354) (#603)

2026-05-31 19:05:40 -05:00

npm-shim.js

fix(mcp): reap the server when its launcher is killed during startup (#1185) (#1199)

2026-07-07 08:45:12 -05:00

pack-npm.sh

ci(release): publish npm packages with provenance and attest release bundles (#1296)

2026-07-15 19:10:34 -05:00

prepare-release.mjs

docs(claude): rewrite release section for auto-promote workflow + link-ref on promote (#437)

2026-05-26 03:25:06 -05:00