Skip to content

chore: switch to semantic-release with OIDC trusted publishing - #63

Merged
mrsimpson merged 1 commit into
mainfrom
chore/semantic-release-trusted-publishing
Sep 23, 2026
Merged

mrsimpson merged 1 commit into
mainfrom
chore/semantic-release-trusted-publishing

Conversation

@mrsimpson

Copy link
Copy Markdown
Collaborator

Same approach applied in codemcp/workflows.

Changes

  • .releaserc.json — semantic-release config that bumps both package.json versions in sync, publishes @codemcp/knowledge and @codemcp/knowledge-server from their pkgRoot, commits changelog + versions back via @semantic-release/git

  • release.yml — replaces mathieudutour/github-tag-action + manual pnpm publish. Adds id-token: write for OIDC. No NPM_TOKEN needed.

  • publishConfig.provenance: true — added to root and mcp-server

  • repository URL — fixed from mrsimpson/agentic-knowledge-mcp to codemcp/knowledge; added directory to mcp-server/package.json

  • semantic-release deps added to root devDependencies

Pre-requisite

Configure trusted publishing on npmjs.com for @codemcp/knowledge and @codemcp/knowledge-server pointing to this repo + release.yml.

- Replace mathieudutour/github-tag-action + manual pnpm publish with semantic-release
- Add .releaserc.json: bumps both package.json versions in sync, publishes
  root and mcp-server from their pkgRoot, commits changelog + versions back
  via @semantic-release/git
- Add id-token: write permission for OIDC provenance (no NPM_TOKEN needed)
- Add provenance: true to publishConfig in root and mcp-server packages
- Fix repository URL (was pointing to old mrsimpson/agentic-knowledge-mcp)
- Add repository.directory to mcp-server package.json
- Add semantic-release + plugins to devDependencies
@mrsimpson
mrsimpson merged commit 4122ac1 into main Sep 23, 2026
1 check passed
@mrsimpson
mrsimpson deleted the chore/semantic-release-trusted-publishing branch September 23, 2026 06:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant