Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: npm/cli
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v11.5.1
Choose a base ref
...
head repository: npm/cli
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v11.5.2
Choose a head ref
  • 3 commits
  • 8 files changed
  • 4 contributors

Commits on Jul 25, 2025

  1. Configuration menu
    Copy the full SHA
    d4e56b2 View commit details
    Browse the repository at this point in the history

Commits on Jul 30, 2025

  1. fix: oidc visibility check for provenance (#8467)

    When someone with a public repository and a private package attempts to
    publish with OIDC, the publish command will fail because provenance is
    enabled, there is currently no visibility check before auto enabling
    provenance.
    
    This is a very rare edge case, but it's still incorrect. OIDC will
    always gracefully fail, but provenance does not.
    
    * This fix adds all the provenance related code after the OIDC auth
    token is set.
    * This requires provenance to be in the default config state (not set by
    the user) for OIDC to even consider auto-enabling provannece.
    
    ---------
    
    Co-authored-by: Gar <gar+gh@danger.computer>
    reggi and wraithgar authored Jul 30, 2025
    Configuration menu
    Copy the full SHA
    7d900c4 View commit details
    Browse the repository at this point in the history
  2. chore: release 11.5.2

    github-actions[bot] authored and reggi committed Jul 30, 2025
    Configuration menu
    Copy the full SHA
    d006583 View commit details
    Browse the repository at this point in the history
Loading