Skip to content

Commit 4c82180

Browse files
authored
[πŸ”₯AUDITπŸ”₯] Add missing package.json keys that are needed for OIDC (#92)
πŸ– _This is an audit!_ πŸ– ## Summary: Trusted Publishing (OIDC) requires a `repository` key in the `package.json` with a `url` defined. This PR adds the required fields and hopefully fixes the last publish issue. Error: ``` πŸ¦‹ info npm info @khanacademy/graphql-flow πŸ¦‹ info @khanacademy/graphql-flow is being published because our local version (3.4.2) has not been published on npm πŸ¦‹ info Publishing "@khanacademy/graphql-flow" at "3.4.2" πŸ¦‹ error an error occurred while publishing @khanacademy/graphql-flow: E422 422 Unprocessable Entity - PUT https://registry.npmjs.org/@khanacademy%2fgraphql-flow - Error verifying sigstore provenance bundle: Failed to validate repository information: package.json: "repository.url" is "", expected to match "https://github.com/Khan/graphql-flow" from provenance πŸ¦‹ error npm notice SECURITY NOTICE: Breaking changes starting October 13, 2025. New tokens will be limited to a maximum lifetime of 90 days, and TOTP setup will be disabled. Classic tokens will be revoked in November. Update your CI/CD workflows to avoid disruption. Learn more: https://gh.io/npm-token-changes πŸ¦‹ error npm notice Publishing to https://registry.npmjs.org with tag latest and public access πŸ¦‹ error npm notice publish Signed provenance statement with source and build information from GitHub Actions πŸ¦‹ error npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=653196413 πŸ¦‹ error npm error code E422 πŸ¦‹ error npm error 422 Unprocessable Entity - PUT https://registry.npmjs.org/@khanacademy%2fgraphql-flow - Error verifying sigstore provenance bundle: Failed to validate repository information: package.json: "repository.url" is "", expected to match "https://github.com/Khan/graphql-flow" from provenance πŸ¦‹ error npm error A complete log of this run can be found in: /home/runner/.npm/_logs/2025-10-29T22_19_58_512Z-debug-0.log πŸ¦‹ error πŸ¦‹ error packages failed to publish: πŸ¦‹ @khanacademy/graphql-flow@3.4.2 ``` Issue: "none" ## Test plan: Hrm Author: jeremywiebe Auditors: jaredly Required Reviewers: Approved By: Checks: βœ… 1 check was successful Pull Request URL: #92
1 parent 31d5b18 commit 4c82180

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

β€Žpackage.jsonβ€Ž

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,13 @@
11
{
22
"name": "@khanacademy/graphql-flow",
33
"version": "3.4.2",
4+
"repository": {
5+
"type": "git",
6+
"url": "https://github.com/Khan/graphql-flow.git"
7+
},
8+
"bugs": {
9+
"url": "https://github.com/Khan/graphql-flow/issues"
10+
},
411
"publishConfig": {
512
"access": "public",
613
"provenance": true

0 commit comments

Comments
Β (0)