release v0.9.7-rc.5: fix(publish): Trusted Publishing 升级 npm CLI>=11.5.1 + provenance + repository

.github/workflows/publish.yml

@@ -5,9 +5,13 @@ on:
     tags:
       - 'v*'
 
+# Trusted publishing (npm): id-token: write lets GitHub Actions mint an OIDC
+# token that npm CLI auto-exchanges for a short-lived publish token, so we no
+# longer rely on a long-lived NPM_TOKEN. See https://docs.npmjs.com/trusted-publishers
 permissions:
   contents: write
   packages: write
+  id-token: write
 
 jobs:
   publish-npm:
@@ -64,10 +68,11 @@ jobs:
           # npm pack dry-run must include the zip
           cd packages/cli && npm pack --dry-run 2>&1 | grep -F 'markus-browser-extension.zip'
 
-      - name: Publish to npm
-        run: cd packages/cli && npm publish --access public --tag ${{ steps.meta.outputs.npm_tag }}
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - name: Upgrade npm CLI (Trusted Publishing needs >= 11.5.1)
+        run: npm install -g npm@latest
+
+      - name: Publish to npm (Trusted Publishing)
+        run: cd packages/cli && npm publish --access public --provenance --tag ${{ steps.meta.outputs.npm_tag }}
 
   build-server-binary:
     needs: publish-npm

package.json

@@ -53,5 +53,5 @@
       "node-pty"
     ]
   },
-  "version": "0.9.7-rc.1"
+  "version": "0.9.7-rc.5"
 }

packages/a2a/package.json

@@ -13,5 +13,5 @@
   "dependencies": {
     "@markus/shared": "workspace:*"
   },
-  "version": "0.9.7-rc.1"
+  "version": "0.9.7-rc.5"
 }

packages/chrome-extension/package.json

@@ -13,5 +13,5 @@
     "esbuild": "^0.25.0",
     "typescript": "^5.6.0"
   },
-  "version": "0.9.7-rc.1"
+  "version": "0.9.7-rc.5"
 }

packages/cli/package.json

@@ -3,6 +3,13 @@
   "description": "Markus — AI Digital Workforce Platform",
   "type": "module",
   "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/markus-global/markus.git"
+  },
+  "publishConfig": {
+    "provenance": true
+  },
   "bin": {
     "markus": "dist/markus.mjs"
   },
@@ -41,5 +48,5 @@
     "commander": "^14.0.3",
     "esbuild": "^0.27.4"
   },
-  "version": "0.9.7-rc.1"
+  "version": "0.9.7-rc.5"
 }

packages/comms/package.json

@@ -13,5 +13,5 @@
   "dependencies": {
     "@markus/shared": "workspace:*"
   },
-  "version": "0.9.7-rc.1"
+  "version": "0.9.7-rc.5"
 }