Skip to content

fix: @W-24754518 add repository field to package.json for npm provenance - #35

Merged
johnchenlive merged 1 commit into
mainfrom
fix/npm-repository-field
Nov 3, 2026
Merged

johnchenlive merged 1 commit into
mainfrom
fix/npm-repository-field

Conversation

@johnchenlive

Copy link
Copy Markdown
Collaborator

What

Add repository, homepage, and bugs to package.json (same format as plugin-api).

Why

The first trusted-publishing release (1.0.3, after #34) failed in the publish workflow:

npm error 422 Unprocessable Entity - Error verifying sigstore provenance bundle:
Failed to validate repository information: package.json: "repository.url" is "",
expected to match "https://github.com/salesforcecli/plugin-data-setup-transfer" from provenance

OIDC auth and provenance signing succeeded; npm rejected the package only because package.json had no repository field. Merging this (fix:) triggers 1.0.4, which should publish with provenance.

Testing

  • yarn build / yarn test ✅ (pre-push hook)
  • npm pkg get repository → "salesforcecli/plugin-data-setup-transfer"

🤖 Generated with Claude Code

npm trusted publishing rejected 1.0.3 (E422) because package.json had no
repository.url to match the GitHub provenance statement.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@johnchenlive
johnchenlive merged commit 2de8c07 into main Nov 3, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant