Skip to content

[codex] Add npm trusted publishing for react hooks#52

Merged
tomcasaburi merged 3 commits intomasterfrom
chore/npm-trusted-publishing
Apr 20, 2026
Merged

[codex] Add npm trusted publishing for react hooks#52
tomcasaburi merged 3 commits intomasterfrom
chore/npm-trusted-publishing

Conversation

@tomcasaburi
Copy link
Copy Markdown
Member

@tomcasaburi tomcasaburi commented Apr 20, 2026

Summary

  • publish the package under @bitsocial/bitsocial-react-hooks and update docs/import examples
  • switch pkc-logger from the GitHub dependency to @pkcprotocol/pkc-logger on npm
  • add npm trusted publishing to the existing dist commit job, gated on actual dist changes and existing npm versions

Validation

  • corepack yarn install --immutable
  • corepack yarn prettier
  • corepack yarn lint (passes with existing warnings)
  • corepack yarn type-check
  • corepack yarn build
  • npm publish --dry-run --access public --provenance

Notes

  • @bitsocial/bitsocial-react-hooks@0.1.0 is already published on npm.
  • This workflow publishes only when the package version in package.json is not already on npm; it does not auto-bump versions.

Note

Medium Risk
Modifies the release pipeline to publish to npm from CI and changes the package name/scope, so a misconfiguration could publish the wrong version or break consumers expecting the old scope.

Overview
Publishes the library as @bitsocial/bitsocial-react-hooks instead of @bitsocialnet/*, updating package.json metadata and aligning README/docs import/install examples and user-facing strings.

Updates logging dependency usage by switching imports from @pkc/pkc-logger to the npm package @pkcprotocol/pkc-logger (and updating yarn.lock).

Enhances the dist CI job to support npm trusted publishing: adds id-token permission, sets up Node/npm, commits dist/coverage artifacts, then conditionally publishes to npm with --provenance only when artifacts changed and the package.json version is not already published.

Reviewed by Cursor Bugbot for commit dc6d658. Bugbot is set up for automated code reviews on this repo. Configure here.

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 20, 2026

Warning

Rate limit exceeded

@tomcasaburi has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 42 minutes and 8 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 42 minutes and 8 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 07f23da7-8f75-41b1-8119-8bcaa210a082

📥 Commits

Reviewing files that changed from the base of the PR and between 9f4614f and dc6d658.

⛔ Files ignored due to path filters (1)
  • yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing (35)
  • .github/workflows/CI.yml
  • AGENTS.md
  • README.md
  • docs/clients.md
  • docs/mock-content.md
  • package.json
  • src/hooks/accounts/accounts.ts
  • src/hooks/accounts/utils.ts
  • src/hooks/actions/actions.ts
  • src/hooks/authors/author-avatars.ts
  • src/hooks/authors/authors.ts
  • src/hooks/comments.ts
  • src/hooks/communities.ts
  • src/hooks/feeds/feeds.ts
  • src/hooks/replies.ts
  • src/hooks/states.ts
  • src/lib/localforage-lru/index.ts
  • src/lib/pkc-js/index.ts
  • src/lib/utils/utils.ts
  • src/stores/accounts/account-generator.ts
  • src/stores/accounts/accounts-actions-internal.ts
  • src/stores/accounts/accounts-actions.ts
  • src/stores/accounts/accounts-database.ts
  • src/stores/accounts/accounts-store.ts
  • src/stores/accounts/utils.ts
  • src/stores/authors-comments/authors-comments-store.ts
  • src/stores/comments/comments-store.ts
  • src/stores/communities-pages/communities-pages-store.ts
  • src/stores/communities/communities-store.ts
  • src/stores/feeds/feeds-store.ts
  • src/stores/feeds/utils.ts
  • src/stores/replies-pages/replies-pages-store.ts
  • src/stores/replies-pages/utils.ts
  • src/stores/replies/replies-store.ts
  • src/stores/replies/utils.ts
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/npm-trusted-publishing

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@tomcasaburi tomcasaburi marked this pull request as ready for review April 20, 2026 08:09
Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 72fa6ef. Configure here.

Comment thread .github/workflows/CI.yml
@tomcasaburi tomcasaburi merged commit 0f8602c into master Apr 20, 2026
8 checks passed
@tomcasaburi tomcasaburi deleted the chore/npm-trusted-publishing branch April 20, 2026 08:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant