fix(ci): remove PR preview package publishing - #61
Merged
Merged
Conversation
Not up to standards ⛔🔴 Issues
|
| Category | Results |
|---|---|
| Security | 1 critical |
🟢 Metrics 0 complexity · 0 duplication
Metric Results Complexity 0 Duplication 0
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.
crapougnax
force-pushed
the
feat/remove-pr-package-publishing
branch
from
September 23, 2026 14:10
f3dc7dc to
b30b2f6
Compare
|
crapougnax
added a commit
that referenced
this pull request
Sep 24, 2026
* feat(auth-rbac): implement isomorphic RBAC security engine with FLS, M2M agent guards and tarpitting (closes #24) * feat(auth-rbac): support semantic RbacAction constants (READ, WRITE, UPDATE, DELETE, MANAGE) and protocol decoupling * chore(release): configure beta pre-release version 1.0.0-beta.1 and .npmignore test exclusions * chore(package): clean files field in package.json to guarantee pristine registry tarball * docs(auth-rbac): complete 100% JSDoc documentation to satisfy CI quality gate audit * ci(gitflow): configure develop branch pipeline, turborepo test caching and staging release automation * fix(auth): type OAuth token response in AbstractOAuthAdapter to fix TypeDoc build * ci: integrate reusable Quatrain/actions/publish-package-preview for on-demand QA preview releases * docs(auth-rbac): add comprehensive 6-step workshop and expose client in auth-supabase * feat(auth-rbac): declare ESM exports and module entrypoint for Vite/Astro compatibility * docs(gitflow): document GitFlow branching protocol and AGENTS.okf baseline * docs(rfc): add RFC for granular JSON key-by-key mutations and partial updates * fix(docs): repair typedoc exports resolution, nextra _meta validation and pipeline triggers (#28) * fix(docs): repair typedoc exports resolution, nextra _meta validation and pipeline triggers * fix(docs): expose per-package API reference in navigation and accelerate CI build * chore: release versions & update hashes [skip ci] * feat(ai-openai): universal OpenAI-compatible AI adapter (DeepSeek, Qwen, Ollama) (#48) * feat(ai-openai): implement universal OpenAI-compatible AI adapter Add @quatrain/ai-openai package providing zero-dependency integration for DeepSeek (V3/R1), Alibaba Qwen (DashScope), OpenAI, and local LLMs (Ollama) with streaming and structured JSON output. Closes #47 * style(ai-openai): address static code analysis and markdownlint issues Fix Codacy and SonarCloud reports: reduce cognitive complexity, eliminate regex backtracking, remove redundant optional chaining and comply with 80-col markdown formatting. * style(ai-openai): eliminate redundant optional chains and conditional checks * style(ai-openai): use optional chaining on config checks * chore: release versions & update hashes [skip ci] * feat(config): implement canonical @quatrain/config registry package (#50) * feat(config): implement canonical @quatrain/config registry package - Pivot Config class extending Core and managing isolated ConfigContainer namespaces - Fail-Fast validation via ConfigurationError for missing or blank parameters - Hierarchical multi-source cascading (Memory > Env > Object) - Support for dot-notation paths, camelCase mapping, and sub-scoping - Full test suite with near-100% coverage Closes #49 * fix(config): address Codacy security, quality and complexity feedback - Use Map for ConfigRegistry to eliminate object injection sinks and dynamic delete - Prevent Prototype Pollution with isSafeKey and isSafePath across all sources - Refactor MemoryConfigSource and EnvConfigSource to use Map and Reflect - Implement safe deepMerge in ConfigContainer.toRecord() - Optimize scope.getAll() to retrieve sub-tree in O(1) - Format LICENSE.md to <=80 chars line length * fix(config): eliminate remaining Codacy injection sink and void expression in tests * fix(config): address static analysis quality gates and security edge cases * fix(config): eliminate array index access in MemoryConfigSource * refactor(config): reduce cognitive complexity in EnvConfigSource and MemoryConfigSource * chore: release versions & update hashes [skip ci] * fix(ci): allow mutable yarn install in docs container build (#52) * fix(ci): allow mutable yarn install in docs container build to prevent lockfile resolution failure * fix(auth): align AuthInterface User import and register signature with AbstractAuthAdapter * fix(ci): add autostash to git pull rebase and ensure npm provenance metadata (#54) * chore: release versions & update hashes [skip ci] * fix(backend): remove @faker-js/faker runtime dependency in MockAdapter (#55) * chore: release versions & update hashes [skip ci] * fix(core): restore deprecated getConfig and enable beta semver for develop (#57) * fix(build): restore workspace:* protocol for all internal dependencies (#58) * chore: release versions & update hashes [skip ci] * feat(ci): add automated temporal CalVer release tagging on main (#60) * fix(ci): remove PR preview package publishing (#61) * fix(ci): remove PR preview package publishing * fix(security): resolve timing attack and path traversal warnings in publish_all * fix(build): restore previousData declaration in publish_all (#62) * fix(build): trigger package release on main when beta versions need finalization (#63) * chore: release versions & update hashes [skip ci] * fix(quality): resolve SonarCloud vulnerability S2245 and code smells, ignore docs in Codacy (#65) * chore: release versions & update hashes [skip ci] --------- Co-authored-by: crapougnax <1242077+crapougnax@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Removes the
publish-previewworkflow job fromci.ymland cleans upbin/publish_all.jsto ensure PRs never publish packages to npmjs. Onlybeta(ondevelop) andlatest(onmain) are published.