From 76d6edc0de3cbcd78d181f9e719599413eb46808 Mon Sep 17 00:00:00 2001 From: JP Lomas Date: Mon, 4 May 2026 17:22:04 +0100 Subject: [PATCH 1/2] fix: release CI fix Signed-off-by: JP Lomas --- package.json | 2 +- packages/abi/.release-touch | 4 ++-- packages/abi/package.json | 2 +- packages/web3-core/.release-touch | 4 ++-- packages/web3-core/package.json | 2 +- packages/web3-errors/.release-touch | 4 ++-- packages/web3-errors/package.json | 2 +- packages/web3-net/.release-touch | 4 ++-- packages/web3-net/package.json | 2 +- packages/web3-providers-http/.release-touch | 4 ++-- packages/web3-providers-http/package.json | 2 +- packages/web3-providers-ipc/.release-touch | 4 ++-- packages/web3-providers-ipc/package.json | 2 +- packages/web3-providers-ws/.release-touch | 4 ++-- packages/web3-providers-ws/package.json | 2 +- packages/web3-qrl-abi/.release-touch | 4 ++-- packages/web3-qrl-abi/package.json | 2 +- packages/web3-qrl-accounts/.release-touch | 4 ++-- packages/web3-qrl-accounts/package.json | 2 +- packages/web3-qrl-contract/.release-touch | 4 ++-- packages/web3-qrl-contract/package.json | 2 +- packages/web3-qrl-iban/.release-touch | 4 ++-- packages/web3-qrl-iban/package.json | 2 +- packages/web3-qrl-qrns/.release-touch | 4 ++-- packages/web3-qrl-qrns/package.json | 2 +- packages/web3-qrl/.release-touch | 4 ++-- packages/web3-qrl/package.json | 2 +- packages/web3-rpc-methods/.release-touch | 4 ++-- packages/web3-rpc-methods/package.json | 2 +- packages/web3-types/.release-touch | 4 ++-- packages/web3-types/package.json | 2 +- packages/web3-utils/.release-touch | 4 ++-- packages/web3-utils/package.json | 2 +- packages/web3-validator/.release-touch | 4 ++-- packages/web3-validator/package.json | 2 +- packages/web3/.release-touch | 4 ++-- packages/web3/package.json | 2 +- scripts/release/inspect-packages.js | 12 ++++++++++-- tools/eslint-config-base-web3/package.json | 2 +- tools/web3-packagetemplate/.release-touch | 4 ++-- tools/web3-packagetemplate/package.json | 2 +- tools/web3-plugin-example/.release-touch | 4 ++-- tools/web3-plugin-example/package.json | 2 +- 43 files changed, 72 insertions(+), 64 deletions(-) diff --git a/package.json b/package.json index 7445917f..580b65ad 100644 --- a/package.json +++ b/package.json @@ -14,7 +14,7 @@ "homepage": "https://github.com/theqrl/web3.js#readme", "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git" + "url": "https://github.com/theQRL/web3.js" }, "bugs": { "url": "https://github.com/theqrl/web3.js/issues" diff --git a/packages/abi/.release-touch b/packages/abi/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/abi/.release-touch +++ b/packages/abi/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/abi/package.json b/packages/abi/package.json index 72361d9d..903a141d 100644 --- a/packages/abi/package.json +++ b/packages/abi/package.json @@ -21,7 +21,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/abi" }, "scripts": { diff --git a/packages/web3-core/.release-touch b/packages/web3-core/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-core/.release-touch +++ b/packages/web3-core/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-core/package.json b/packages/web3-core/package.json index 0bd21ec3..f5b07d19 100644 --- a/packages/web3-core/package.json +++ b/packages/web3-core/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-core" }, "author": "The QRL Contributors", diff --git a/packages/web3-errors/.release-touch b/packages/web3-errors/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-errors/.release-touch +++ b/packages/web3-errors/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-errors/package.json b/packages/web3-errors/package.json index a3a9a7bb..9c423ca5 100644 --- a/packages/web3-errors/package.json +++ b/packages/web3-errors/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-errors" }, "author": "The QRL Contributors", diff --git a/packages/web3-net/.release-touch b/packages/web3-net/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-net/.release-touch +++ b/packages/web3-net/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-net/package.json b/packages/web3-net/package.json index 46e561a0..b0d9d7a9 100644 --- a/packages/web3-net/package.json +++ b/packages/web3-net/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-net" }, "author": "The QRL Contributors", diff --git a/packages/web3-providers-http/.release-touch b/packages/web3-providers-http/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-providers-http/.release-touch +++ b/packages/web3-providers-http/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-providers-http/package.json b/packages/web3-providers-http/package.json index ec5bea77..a44ceef7 100644 --- a/packages/web3-providers-http/package.json +++ b/packages/web3-providers-http/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-providers-http" }, "author": "The QRL Contributors", diff --git a/packages/web3-providers-ipc/.release-touch b/packages/web3-providers-ipc/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-providers-ipc/.release-touch +++ b/packages/web3-providers-ipc/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-providers-ipc/package.json b/packages/web3-providers-ipc/package.json index ffa36880..968d9324 100644 --- a/packages/web3-providers-ipc/package.json +++ b/packages/web3-providers-ipc/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-providers-ipc" }, "author": "The QRL Contributors", diff --git a/packages/web3-providers-ws/.release-touch b/packages/web3-providers-ws/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-providers-ws/.release-touch +++ b/packages/web3-providers-ws/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-providers-ws/package.json b/packages/web3-providers-ws/package.json index a81a185f..1934fc1f 100644 --- a/packages/web3-providers-ws/package.json +++ b/packages/web3-providers-ws/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-providers-ws" }, "author": "The QRL Contributors", diff --git a/packages/web3-qrl-abi/.release-touch b/packages/web3-qrl-abi/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-qrl-abi/.release-touch +++ b/packages/web3-qrl-abi/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-qrl-abi/package.json b/packages/web3-qrl-abi/package.json index 123db137..ddb2ab9c 100644 --- a/packages/web3-qrl-abi/package.json +++ b/packages/web3-qrl-abi/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-qrl-abi" }, "author": "The QRL Contributors", diff --git a/packages/web3-qrl-accounts/.release-touch b/packages/web3-qrl-accounts/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-qrl-accounts/.release-touch +++ b/packages/web3-qrl-accounts/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-qrl-accounts/package.json b/packages/web3-qrl-accounts/package.json index 59700f2c..072e4f39 100644 --- a/packages/web3-qrl-accounts/package.json +++ b/packages/web3-qrl-accounts/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-qrl-accounts" }, "author": "The QRL Contributors", diff --git a/packages/web3-qrl-contract/.release-touch b/packages/web3-qrl-contract/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-qrl-contract/.release-touch +++ b/packages/web3-qrl-contract/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-qrl-contract/package.json b/packages/web3-qrl-contract/package.json index e2836f91..a2a95ca3 100644 --- a/packages/web3-qrl-contract/package.json +++ b/packages/web3-qrl-contract/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-qrl-contract" }, "author": "The QRL Contributors", diff --git a/packages/web3-qrl-iban/.release-touch b/packages/web3-qrl-iban/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-qrl-iban/.release-touch +++ b/packages/web3-qrl-iban/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-qrl-iban/package.json b/packages/web3-qrl-iban/package.json index 4c2f603c..05f57c5f 100644 --- a/packages/web3-qrl-iban/package.json +++ b/packages/web3-qrl-iban/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-qrl-iban" }, "author": "The QRL Contributors", diff --git a/packages/web3-qrl-qrns/.release-touch b/packages/web3-qrl-qrns/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-qrl-qrns/.release-touch +++ b/packages/web3-qrl-qrns/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-qrl-qrns/package.json b/packages/web3-qrl-qrns/package.json index fa440ffd..8f044368 100644 --- a/packages/web3-qrl-qrns/package.json +++ b/packages/web3-qrl-qrns/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-qrl-qrns" }, "author": "The QRL Contributors", diff --git a/packages/web3-qrl/.release-touch b/packages/web3-qrl/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-qrl/.release-touch +++ b/packages/web3-qrl/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-qrl/package.json b/packages/web3-qrl/package.json index ecca07b9..046bd057 100644 --- a/packages/web3-qrl/package.json +++ b/packages/web3-qrl/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-qrl" }, "author": "The QRL Contributors", diff --git a/packages/web3-rpc-methods/.release-touch b/packages/web3-rpc-methods/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-rpc-methods/.release-touch +++ b/packages/web3-rpc-methods/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-rpc-methods/package.json b/packages/web3-rpc-methods/package.json index 2871e058..362810a2 100644 --- a/packages/web3-rpc-methods/package.json +++ b/packages/web3-rpc-methods/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-rpc-methods" }, "author": "The QRL Contributors", diff --git a/packages/web3-types/.release-touch b/packages/web3-types/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-types/.release-touch +++ b/packages/web3-types/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-types/package.json b/packages/web3-types/package.json index 6c1a963a..c4807324 100644 --- a/packages/web3-types/package.json +++ b/packages/web3-types/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-types" }, "author": "The QRL Contributors", diff --git a/packages/web3-utils/.release-touch b/packages/web3-utils/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-utils/.release-touch +++ b/packages/web3-utils/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-utils/package.json b/packages/web3-utils/package.json index 63d98264..f9baa8f9 100644 --- a/packages/web3-utils/package.json +++ b/packages/web3-utils/package.json @@ -17,7 +17,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-utils" }, "author": "The QRL Contributors", diff --git a/packages/web3-validator/.release-touch b/packages/web3-validator/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3-validator/.release-touch +++ b/packages/web3-validator/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3-validator/package.json b/packages/web3-validator/package.json index 97deab53..98d8c41b 100644 --- a/packages/web3-validator/package.json +++ b/packages/web3-validator/package.json @@ -17,7 +17,7 @@ "browser": "./dist/web3-validator.min.js", "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3-validator" }, "author": "The QRL Contributors", diff --git a/packages/web3/.release-touch b/packages/web3/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/packages/web3/.release-touch +++ b/packages/web3/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/packages/web3/package.json b/packages/web3/package.json index 95551ceb..a6b7da50 100644 --- a/packages/web3/package.json +++ b/packages/web3/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "packages/web3" }, "engines": { diff --git a/scripts/release/inspect-packages.js b/scripts/release/inspect-packages.js index 4f12eba4..ace3d200 100644 --- a/scripts/release/inspect-packages.js +++ b/scripts/release/inspect-packages.js @@ -43,6 +43,8 @@ const forbiddenPatterns = [ [/ copy\./, 'copy file'], ]; +const provenanceRepositoryUrl = 'https://github.com/theQRL/web3.js'; + const packDryRun = packagePath => { const output = execFileSync('npm', ['pack', '--dry-run', '--json'], { cwd: packagePath, @@ -73,6 +75,12 @@ for (const pkg of publishablePackages()) { errors.push(`${pkg.name}: package.json must not contain a committed gitHead`); } + if (manifest.repository?.url !== provenanceRepositoryUrl) { + errors.push( + `${pkg.name}: repository.url must be ${provenanceRepositoryUrl} for npm provenance verification`, + ); + } + if (entrypoints.length === 0) { errors.push(`${pkg.name}: no package entrypoint declared`); } @@ -99,7 +107,7 @@ for (const pkg of publishablePackages()) { summaries.push(`${pkg.name}: ${files.size} files, ${pack.unpackedSize} unpacked bytes`); } -for (const summary of summaries) console.log(summary); +for (const summary of summaries) console.info(summary); if (errors.length > 0) { console.error('\nPackage inspection failed:'); @@ -107,4 +115,4 @@ if (errors.length > 0) { process.exit(1); } -console.log(`Inspected ${summaries.length} publishable package dry-runs`); +console.info(`Inspected ${summaries.length} publishable package dry-runs`); diff --git a/tools/eslint-config-base-web3/package.json b/tools/eslint-config-base-web3/package.json index 577feb4b..e4ed3c1a 100644 --- a/tools/eslint-config-base-web3/package.json +++ b/tools/eslint-config-base-web3/package.json @@ -19,7 +19,7 @@ "homepage": "https://github.com/theqrl/web3.js#readme", "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git" + "url": "https://github.com/theQRL/web3.js" }, "bugs": { "url": "https://github.com/theqrl/web3.js/issues" diff --git a/tools/web3-packagetemplate/.release-touch b/tools/web3-packagetemplate/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/tools/web3-packagetemplate/.release-touch +++ b/tools/web3-packagetemplate/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/tools/web3-packagetemplate/package.json b/tools/web3-packagetemplate/package.json index 3a36785b..03c984e3 100644 --- a/tools/web3-packagetemplate/package.json +++ b/tools/web3-packagetemplate/package.json @@ -16,7 +16,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "tools/web3-packagetemplate" }, "author": "The QRL Contributors", diff --git a/tools/web3-plugin-example/.release-touch b/tools/web3-plugin-example/.release-touch index 2cdf84ea..d04e1e11 100644 --- a/tools/web3-plugin-example/.release-touch +++ b/tools/web3-plugin-example/.release-touch @@ -1,2 +1,2 @@ -2026-05-04T15:09:44.353Z -ade200518f7c69a958c61f433caab004 +2026-05-04T16:21:31.460Z +98097f04c8462f7c814e1ff607d4a70a diff --git a/tools/web3-plugin-example/package.json b/tools/web3-plugin-example/package.json index e42fb589..4948db63 100644 --- a/tools/web3-plugin-example/package.json +++ b/tools/web3-plugin-example/package.json @@ -9,7 +9,7 @@ "types": "./lib/index.d.ts", "repository": { "type": "git", - "url": "git+https://github.com/theqrl/web3.js.git", + "url": "https://github.com/theQRL/web3.js", "directory": "tools/web3-plugin-example" }, "engines": { From 35ba0bb3a522d2be6f28adaecb2e256de5017d55 Mon Sep 17 00:00:00 2001 From: JP Lomas Date: Mon, 4 May 2026 17:39:57 +0100 Subject: [PATCH 2/2] ci: always validate actions Signed-off-by: JP Lomas --- .github/workflows/actionlint.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml index a1b7c774..1817d6dd 100644 --- a/.github/workflows/actionlint.yml +++ b/.github/workflows/actionlint.yml @@ -3,12 +3,8 @@ name: Lint GitHub Actions on: push: branches: [main] - paths: - - ".github/workflows/**" pull_request: branches: [main] - paths: - - ".github/workflows/**" workflow_dispatch: permissions: