ci(release): npm@latest preflight for OIDC + consume vestigial changeset (first-publish-ready)

.github/workflows/ci.yml

@@ -11,7 +11,6 @@ jobs:
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10      # v6.0.3
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093     # v6.0.8
-        with: { version: 10.24.0 }
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e    # v6.4.0
         with: { node-version: 24, cache: pnpm }
       - uses: actions-rust-lang/setup-rust-toolchain@46268bd060767258de96ed93c1251119784f2ab6  # v1
@@ -41,7 +40,6 @@ jobs:
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10      # v6.0.3
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093     # v6.0.8
-        with: { version: 10.24.0 }
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e    # v6.4.0
         with: { node-version: 24, cache: pnpm }
       - uses: actions-rust-lang/setup-rust-toolchain@46268bd060767258de96ed93c1251119784f2ab6  # v1
@@ -76,7 +74,6 @@ jobs:
             src/features/invoice-codec
             src/shared/lib/tlv-codec
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093     # v6.0.8
-        with: { version: 10.24.0 }
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e    # v6.4.0
         with: { node-version: 24, cache: pnpm }
       - uses: actions-rust-lang/setup-rust-toolchain@46268bd060767258de96ed93c1251119784f2ab6  # v1

.github/workflows/release.yml

@@ -8,9 +8,8 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10      # v6.0.3
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0      # v6.0.3
       - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093     # v6.0.8
-        with: { version: 10.24.0 }
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e    # v6.4.0
         with: { node-version: 24, cache: pnpm, registry-url: 'https://registry.npmjs.org' }
       - uses: actions-rust-lang/setup-rust-toolchain@46268bd060767258de96ed93c1251119784f2ab6  # v1

package.json

@@ -3,7 +3,7 @@
   "private": true,
   "engines": {
     "node": ">=24",
-    "pnpm": ">=10"
+    "pnpm": ">=11"
   },
   "scripts": {
     "build": "pnpm -r --filter './packages/*' build",
@@ -20,10 +20,5 @@
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.60.1"
   },
-  "packageManager": "pnpm@10.24.0",
-  "pnpm": {
-    "overrides": {
-      "uuid": ">=11.1.1"
-    }
-  }
+  "packageManager": "pnpm@11.5.1"
 }

packages/codec/CHANGELOG.md

@@ -6,7 +6,7 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning: [S
 
 ---
 
-## [Unreleased] — 0.1.0 pre-publish (PR #7 in review)
+## 0.1.0
 
 ### Added
 
@@ -51,9 +51,3 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning: [S
 
 - Unit tests: ~135 → 211 (post R1-R9 + T6 hardening).
 - Golden vectors: 27 (Tier 1 frozen) + 54 corpus entries (Tier 2 parametric).
-
----
-
-## [0.1.0] — Unreleased
-
-Initial package structure. No published npm or crates.io release yet (Phase 3 target).

packages/networks/CHANGELOG.md

@@ -4,4 +4,4 @@
 
 ### Minor Changes
 
-- Initial release.
+- Initial 0.1.0 release. Chain configs for 5 EVM networks (Ethereum, Base, Arbitrum, Optimism, Polygon) with public RPC URLs. `SUPPORTED_TOKENS` is empty at 0.1.0 (@alpha — populated in a future release from the Uniswap Token List).

packages/types/CHANGELOG.md

@@ -4,4 +4,4 @@
 
 ### Minor Changes
 
-- Initial release.
+- Initial 0.1.0 release. TypeScript type definitions for Invoice, InvoiceItem, InvoiceFrom, InvoiceClient, NetworkConfig, ChainId, FrameContext, FrameState, PaymentProof, and PaymentRequiredResponse. Zero runtime dependencies.

pnpm-workspace.yaml

@@ -1,2 +1,9 @@
 packages:
   - "packages/*"
+
+allowBuilds:
+  '@swc/core': true
+  esbuild: true
+
+overrides:
+  uuid: ">=11.1.1"