ci: release through cyberuni OIDC and point metadata at cyberuni

.changeset/olive-donkeys-invite.md

@@ -0,0 +1,6 @@
+---
+'assertron': patch
+---
+
+Point repository metadata at `cyberuni/assertron` and release through npm trusted
+publishing (OIDC) instead of a long-lived `NPM_TOKEN`.

.github/workflows/pull-request.yml

@@ -2,7 +2,17 @@ name: pull-request
 on:
   pull_request:
     types: [opened, synchronize]
+  merge_group:
 
 jobs:
   code:
-    uses: unional/.github/.github/workflows/pnpm-verify.yml@main
+    uses: cyberuni/.github/.github/workflows/pnpm-verify.yml@main
+    with:
+      os: '["ubuntu-latest"]'
+      skip-playwright: true
+
+  publish-gate:
+    if: startsWith(github.head_ref, 'changeset-release/')
+    uses: cyberuni/.github/.github/workflows/pnpm-publish-gate.yml@main
+    permissions:
+      contents: read

.github/workflows/release.yml

@@ -5,9 +5,15 @@ on:
 
 jobs:
   code:
-    uses: unional/.github/.github/workflows/pnpm-verify.yml@main
+    uses: cyberuni/.github/.github/workflows/pnpm-verify.yml@main
+    with:
+      os: '["ubuntu-latest"]'
+      skip-playwright: true
 
   release:
-    uses: unional/.github/.github/workflows/pnpm-release-changeset.yml@main
+    uses: cyberuni/.github/.github/workflows/pnpm-release-changeset-oidc.yml@main
     needs: code
-    secrets: inherit
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write

README.md

@@ -6,7 +6,7 @@
 [![GitHub NodeJS][github-nodejs]][github-action-url]
 [![Codecov][codecov-image]][codecov-url]
 
-[![Semantic Release][semantic-release-image]][semantic-release-url]
+[![Changesets][changesets-image]][changesets-url]
 
 [![Visual Studio Code][vscode-image]][vscode-url]
 
@@ -186,13 +186,13 @@ yarn verify
 [downloads-image]: https://img.shields.io/npm/dm/assertron.svg?style=flat
 [downloads-url]: https://npmjs.org/package/assertron
 
-[github-nodejs]: https://github.com/unional/assertron/workflows/nodejs/badge.svg
-[github-action-url]: https://github.com/unional/assertron/actions
-[codecov-image]: https://codecov.io/gh/unional/assertron/branch/master/graph/badge.svg
-[codecov-url]: https://codecov.io/gh/unional/assertron
+[github-nodejs]: https://github.com/cyberuni/assertron/actions/workflows/release.yml/badge.svg
+[github-action-url]: https://github.com/cyberuni/assertron/actions
+[codecov-image]: https://codecov.io/gh/cyberuni/assertron/branch/main/graph/badge.svg
+[codecov-url]: https://codecov.io/gh/cyberuni/assertron
 
-[semantic-release-image]: https://img.shields.io/badge/%20%20%F0%9F%93%A6%F0%9F%9A%80-semantic--release-e10079.svg
-[semantic-release-url]: https://github.com/semantic-release/semantic-release
+[changesets-image]: https://img.shields.io/badge/maintained%20with-changesets-176de3.svg
+[changesets-url]: https://github.com/changesets/changesets
 
 [vscode-image]: https://img.shields.io/badge/vscode-ready-green.svg
 [vscode-url]: https://code.visualstudio.com/

package.json

@@ -2,13 +2,13 @@
   "name": "assertron",
   "version": "11.5.2",
   "description": "A supplementary assertion library",
-  "homepage": "https://github.com/unional/assertron",
+  "homepage": "https://github.com/cyberuni/assertron",
   "bugs": {
-    "url": "https://github.com/unional/assertron/issues"
+    "url": "https://github.com/cyberuni/assertron/issues"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/unional/assertron.git"
+    "url": "https://github.com/cyberuni/assertron.git"
   },
   "license": "MIT",
   "author": {