All issues

Search results

mint should own every publish lane, not just npm + JSR — GHCR is duplicated 5 ways and FlakeHub lives in the wrong repo

Status: Open.

#55 In bounded-systems/mint;

· bdelanghe opened on Aug 23, 2026

mint release leaves an untracked v<version>.intoto.json in every adopting repo

Status: Open.

#36 In bounded-systems/mint;

· bdelanghe opened on Aug 22, 2026

version.yml cannot see a hand-edited manifest version, so the double bump it exists to prevent passes green

Status: Open.

#35 In bounded-systems/mint;

· bdelanghe opened on Aug 21, 2026

Cut the release tag in CI under OIDC — it is the only step in the chain still requiring a human's laptop

Status: Open.

#22 In bounded-systems/mint;

· bdelanghe opened on Jul 31, 2026

docs: how to bootstrap a first release + the tag-creation-actor requirement

Status: Open.

#18 In bounded-systems/mint;

· bdelanghe opened on Jul 8, 2026

minimumDependencyAge's 24h JSR cooldown ripples across batch releases of interdependent bounded-systems packages

Status: Open.

#11 In bounded-systems/mint;

· bdelanghe opened on Jul 4, 2026