[PR #12] [MERGED] fix(ci): add repository metadata for npm provenance publish #22

New issue

Closed

opened 2026-10-31 22:03:55 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-31 22:03:55 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/comfy-typescript-sdk/pull/12
Author: @wei-hai
Created: 7/21/2026
Status: ✅ Merged
Merged: 7/21/2026
Merged by: @wei-hai

Base: main ← Head: fix/package-repository-url

📝 Commits (1)

a22e180 fix(ci): add repository metadata so npm provenance publish validates

📊 Changes

2 files changed (+14 additions, -2 deletions)

View changed files

📝 package.json (+8 -0)
📝 scripts/check-public-repo-hygiene.mjs (+6 -2)

📄 Description

The v0.1.1 npm publish got past the earlier path bug and packed/signed, then failed:

npm error code E422
npm error 422 Unprocessable Entity - Error verifying sigstore provenance bundle:
Failed to validate repository information: package.json: "repository.url" is "",
expected to match "https://github.com/Comfy-Org/ComfyTypeScriptSDK" from provenance

npm publish --provenance validates package.json repository.url against the repo attested in the OIDC provenance bundle. The field was missing.

Fix: add repository (+ homepage/bugs) pointing at this repo. Also strip a trailing .git in the public-repo-hygiene check so a conventional repository.url ending in .git isn't mis-flagged as an unknown repo.

After merge, v0.1.1 is recut on the fixed main so the publish re-fires.

🤖 Generated with Claude Code

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/comfy-typescript-sdk/pull/12 **Author:** [@wei-hai](https://github.com/wei-hai) **Created:** 7/21/2026 **Status:** ✅ Merged **Merged:** 7/21/2026 **Merged by:** [@wei-hai](https://github.com/wei-hai) **Base:** `main` ← **Head:** `fix/package-repository-url` --- ### 📝 Commits (1) - [`a22e180`](https://github.com/Comfy-Org/comfy-typescript-sdk/commit/a22e1807d361153bcd185b58abedc0b3c0824745) fix(ci): add repository metadata so npm provenance publish validates ### 📊 Changes **2 files changed** (+14 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+8 -0) 📝 `scripts/check-public-repo-hygiene.mjs` (+6 -2) </details> ### 📄 Description The v0.1.1 npm publish got past the earlier path bug and packed/signed, then failed: ``` npm error code E422 npm error 422 Unprocessable Entity - Error verifying sigstore provenance bundle: Failed to validate repository information: package.json: "repository.url" is "", expected to match "https://github.com/Comfy-Org/ComfyTypeScriptSDK" from provenance ``` `npm publish --provenance` validates `package.json` `repository.url` against the repo attested in the OIDC provenance bundle. The field was missing. **Fix:** add `repository` (+ `homepage`/`bugs`) pointing at this repo. Also strip a trailing `.git` in the public-repo-hygiene check so a conventional `repository.url` ending in `.git` isn't mis-flagged as an unknown repo. After merge, v0.1.1 is recut on the fixed `main` so the publish re-fires. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-31 22:03:55 +00:00