[READ-ONLY] Mirror of https://github.com/excaliburjs/Excalibur. 🎮 Your friendly TypeScript 2D game engine for the web 🗡️
excaliburjs.com
excalibur
excaliburjs
game-development
game-engine
game-framework
gamedev
games
html5-canvas
typescript
chore: enable provenance publishing
Erik Onarheim
(Sep 26, 2025, 8:24 AM -0500)
c2cccca8
3667d70c
+17
-6
+6
-2
.github/workflows/deploy.yml
+6
-2
.github/workflows/deploy.yml
···
5
5
6
6
env:
7
7
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
8
-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
9
8
10
9
jobs:
11
10
build:
···
14
13
name: Publish alpha npm package
15
14
needs: [build]
16
15
runs-on: [ubuntu-latest]
16
+
permissions:
17
+
contents: read
18
+
id-token: write
17
19
18
20
steps:
19
21
- uses: actions/checkout@v4
···
30
32
- run: echo "alpha_version=$(node -e "console.log(require('./version').getAlphaVersion());")" >> $GITHUB_ENV
31
33
- run: echo $alpha_version
32
34
- run: npm --no-git-tag-version version $alpha_version
33
-
- run: npm publish --tag next
35
+
- run: npm publish --tag next --provenance
36
+
env:
37
+
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
34
38
- name: Create Tag
35
39
uses: actions/github-script@v7.0.1
36
40
with:
+6
-3
.github/workflows/release.yml
+6
-3
.github/workflows/release.yml
···
5
5
6
6
env:
7
7
release: true
8
-
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
9
-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
10
8
11
9
jobs:
12
10
build:
···
15
13
name: Publish npm package
16
14
needs: [build]
17
15
runs-on: [ubuntu-latest]
16
+
permissions:
17
+
contents: read
18
+
id-token: write
18
19
19
20
steps:
20
21
- uses: actions/checkout@v4
···
29
30
- run: npm ci
30
31
- run: npm run build
31
32
- run: npm run build:esm
32
-
- run: npm publish
33
+
- run: npm publish --provenance
34
+
env:
35
+
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+2
-1
.npmrc
+2
-1
.npmrc
+3
package.json
+3
package.json
···
3
3
"sideEffects": false,
4
4
"version": "0.31.0",
5
5
"exNextVersion": "0.32.0",
6
+
"publishConfig": {
7
+
"provenance": true
8
+
},
6
9
"description": "Excalibur.js is a simple JavaScript game engine with TypeScript bindings for making 2D games in HTML5 Canvas. Our mission is to make web game development as simple as possible.",
7
10
"author": "https://github.com/excaliburjs/Excalibur/graphs/contributors",
8
11
"homepage": "https://github.com/excaliburjs/Excalibur",