From 065bbd3c997756f3d011ec5d978b168132c41b71 Mon Sep 17 00:00:00 2001 From: Kris Braun Date: Fri, 8 Mar 2024 15:30:13 -0500 Subject: [PATCH] [v4] Add provenance to all published packages (#13160) * Add provenance to all packages Based on #13097 by @saibotk Add [provenance](https://docs.npmjs.com/generating-provenance-statements) for all published packages. --- Co-authored-by: saibotk * Document reason for id-token permission * Update changelog --- .github/workflows/release-oxide.yml | 5 +++++ CHANGELOG.md | 1 + oxide/crates/node/npm/android-arm-eabi/package.json | 10 +++++++++- oxide/crates/node/npm/android-arm64/package.json | 10 +++++++++- oxide/crates/node/npm/darwin-arm64/package.json | 8 ++++++++ oxide/crates/node/npm/darwin-x64/package.json | 8 ++++++++ oxide/crates/node/npm/freebsd-x64/package.json | 8 ++++++++ oxide/crates/node/npm/linux-arm-gnueabihf/package.json | 8 ++++++++ oxide/crates/node/npm/linux-arm64-gnu/package.json | 8 ++++++++ oxide/crates/node/npm/linux-arm64-musl/package.json | 8 ++++++++ oxide/crates/node/npm/linux-x64-gnu/package.json | 8 ++++++++ oxide/crates/node/npm/linux-x64-musl/package.json | 8 ++++++++ oxide/crates/node/npm/win32-x64-msvc/package.json | 8 ++++++++ oxide/crates/node/package.json | 8 ++++++++ packages/@tailwindcss-cli/package.json | 9 ++++++++- packages/@tailwindcss-postcss/package.json | 9 ++++++++- packages/@tailwindcss-vite/package.json | 9 ++++++++- 17 files changed, 128 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release-oxide.yml b/.github/workflows/release-oxide.yml index e810d16ea..94a7d90fb 100644 --- a/.github/workflows/release-oxide.yml +++ b/.github/workflows/release-oxide.yml @@ -150,6 +150,11 @@ jobs: timeout-minutes: 15 name: Build and release Tailwind CSS + permissions: + contents: read + # https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions + id-token: write + needs: - build diff --git a/CHANGELOG.md b/CHANGELOG.md index fc3c34b44..bcc8f1f17 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Added - Add `font-stretch` utilities ([#13153](https://github.com/tailwindlabs/tailwindcss/pull/13153)) +- Packages are published with [npm provenance](https://docs.npmjs.com/generating-provenance-statements) ([#13160](https://github.com/tailwindlabs/tailwindcss/pull/13160)) ### Fixed diff --git a/oxide/crates/node/npm/android-arm-eabi/package.json b/oxide/crates/node/npm/android-arm-eabi/package.json index aea271d85..b31447dee 100644 --- a/oxide/crates/node/npm/android-arm-eabi/package.json +++ b/oxide/crates/node/npm/android-arm-eabi/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-android-arm-eabi", - "version": "4.0.0-alpha.3", + "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/android-arm-eabi" + }, "os": [ "android" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.android-arm-eabi.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/android-arm64/package.json b/oxide/crates/node/npm/android-arm64/package.json index 4de321822..83048ff26 100644 --- a/oxide/crates/node/npm/android-arm64/package.json +++ b/oxide/crates/node/npm/android-arm64/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-android-arm64", - "version": "4.0.0-alpha.3", + "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/android-arm64" + }, "os": [ "android" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.android-arm64.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/darwin-arm64/package.json b/oxide/crates/node/npm/darwin-arm64/package.json index fe27c7b62..0079870aa 100644 --- a/oxide/crates/node/npm/darwin-arm64/package.json +++ b/oxide/crates/node/npm/darwin-arm64/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-darwin-arm64", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/darwin-arm64" + }, "os": [ "darwin" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.darwin-arm64.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/darwin-x64/package.json b/oxide/crates/node/npm/darwin-x64/package.json index 71d2f7c8f..63bc1d94e 100644 --- a/oxide/crates/node/npm/darwin-x64/package.json +++ b/oxide/crates/node/npm/darwin-x64/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-darwin-x64", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/darwin-x64" + }, "os": [ "darwin" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.darwin-x64.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/freebsd-x64/package.json b/oxide/crates/node/npm/freebsd-x64/package.json index 93daa1dbf..c04994a69 100644 --- a/oxide/crates/node/npm/freebsd-x64/package.json +++ b/oxide/crates/node/npm/freebsd-x64/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-freebsd-x64", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/freebsd-x64" + }, "os": [ "freebsd" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.freebsd-x64.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/linux-arm-gnueabihf/package.json b/oxide/crates/node/npm/linux-arm-gnueabihf/package.json index 6dc89ec35..edb639ed9 100644 --- a/oxide/crates/node/npm/linux-arm-gnueabihf/package.json +++ b/oxide/crates/node/npm/linux-arm-gnueabihf/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-linux-arm-gnueabihf", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/linux-arm-gnueabihf" + }, "os": [ "linux" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.linux-arm-gnueabihf.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/linux-arm64-gnu/package.json b/oxide/crates/node/npm/linux-arm64-gnu/package.json index 2a7632b54..10ccb6f2c 100644 --- a/oxide/crates/node/npm/linux-arm64-gnu/package.json +++ b/oxide/crates/node/npm/linux-arm64-gnu/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-linux-arm64-gnu", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/linux-arm64-gnu" + }, "os": [ "linux" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.linux-arm64-gnu.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/linux-arm64-musl/package.json b/oxide/crates/node/npm/linux-arm64-musl/package.json index 6deb964b1..0fcbeddc5 100644 --- a/oxide/crates/node/npm/linux-arm64-musl/package.json +++ b/oxide/crates/node/npm/linux-arm64-musl/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-linux-arm64-musl", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/linux-arm64-musl" + }, "os": [ "linux" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.linux-arm64-musl.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/linux-x64-gnu/package.json b/oxide/crates/node/npm/linux-x64-gnu/package.json index 97897ce94..ed7e28008 100644 --- a/oxide/crates/node/npm/linux-x64-gnu/package.json +++ b/oxide/crates/node/npm/linux-x64-gnu/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-linux-x64-gnu", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/linux-x64-gnu" + }, "os": [ "linux" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.linux-x64-gnu.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/linux-x64-musl/package.json b/oxide/crates/node/npm/linux-x64-musl/package.json index 4c0d2ad2b..33cbd16db 100644 --- a/oxide/crates/node/npm/linux-x64-musl/package.json +++ b/oxide/crates/node/npm/linux-x64-musl/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-linux-x64-musl", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/linux-x64-musl" + }, "os": [ "linux" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.linux-x64-musl.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/npm/win32-x64-msvc/package.json b/oxide/crates/node/npm/win32-x64-msvc/package.json index 66d6db265..7cc7089b9 100644 --- a/oxide/crates/node/npm/win32-x64-msvc/package.json +++ b/oxide/crates/node/npm/win32-x64-msvc/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide-win32-x64-msvc", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node/npm/win32-x64-msvc" + }, "os": [ "win32" ], @@ -11,6 +16,9 @@ "files": [ "tailwindcss-oxide.win32-x64-msvc.node" ], + "publishConfig": { + "provenance": true + }, "license": "MIT", "engines": { "node": ">= 10" diff --git a/oxide/crates/node/package.json b/oxide/crates/node/package.json index a98c87e8d..2ad19dbe8 100644 --- a/oxide/crates/node/package.json +++ b/oxide/crates/node/package.json @@ -1,6 +1,11 @@ { "name": "@tailwindcss/oxide", "version": "4.0.0-alpha.6", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "oxide/crates/node" + }, "main": "index.js", "types": "index.d.ts", "napi": { @@ -30,6 +35,9 @@ "index.js", "index.d.ts" ], + "publishConfig": { + "provenance": true + }, "scripts": { "artifacts": "npx napi artifacts", "build": "npx napi build --platform --release --no-const-enum", diff --git a/packages/@tailwindcss-cli/package.json b/packages/@tailwindcss-cli/package.json index a87e91237..49295a385 100644 --- a/packages/@tailwindcss-cli/package.json +++ b/packages/@tailwindcss-cli/package.json @@ -3,7 +3,11 @@ "version": "4.0.0-alpha.6", "description": "A utility-first CSS framework for rapidly building custom user interfaces.", "license": "MIT", - "repository": "https://github.com/tailwindlabs/tailwindcss.git", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "packages/@tailwindcss-cli" + }, "bugs": "https://github.com/tailwindlabs/tailwindcss/issues", "homepage": "https://tailwindcss.com", "scripts": { @@ -20,6 +24,9 @@ "files": [ "dist" ], + "publishConfig": { + "provenance": true + }, "dependencies": { "@parcel/watcher": "^2.4.1", "@tailwindcss/oxide": "workspace:^", diff --git a/packages/@tailwindcss-postcss/package.json b/packages/@tailwindcss-postcss/package.json index 9daac73c8..7b461ef8f 100644 --- a/packages/@tailwindcss-postcss/package.json +++ b/packages/@tailwindcss-postcss/package.json @@ -3,7 +3,11 @@ "version": "4.0.0-alpha.6", "description": "PostCSS plugin for Tailwind CSS, a utility-first CSS framework for rapidly building custom user interfaces", "license": "MIT", - "repository": "https://github.com/tailwindlabs/tailwindcss.git", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "packages/@tailwindcss-postcss" + }, "bugs": "https://github.com/tailwindlabs/tailwindcss/issues", "homepage": "https://tailwindcss.com", "scripts": { @@ -14,6 +18,9 @@ "files": [ "dist/" ], + "publishConfig": { + "provenance": true + }, "exports": { ".": { "types": "./dist/index.d.ts", diff --git a/packages/@tailwindcss-vite/package.json b/packages/@tailwindcss-vite/package.json index 654cab384..072cf3e37 100644 --- a/packages/@tailwindcss-vite/package.json +++ b/packages/@tailwindcss-vite/package.json @@ -3,7 +3,11 @@ "version": "4.0.0-alpha.6", "description": "A utility-first CSS framework for rapidly building custom user interfaces.", "license": "MIT", - "repository": "https://github.com/tailwindlabs/tailwindcss.git", + "repository": { + "type": "git", + "url": "git+https://github.com/tailwindlabs/tailwindcss.git", + "directory": "packages/@tailwindcss-vite" + }, "bugs": "https://github.com/tailwindlabs/tailwindcss/issues", "homepage": "https://tailwindcss.com", "scripts": { @@ -13,6 +17,9 @@ "files": [ "dist/" ], + "publishConfig": { + "provenance": true + }, "exports": { ".": { "types": "./dist/index.d.mts",