From 0faf843b08c1b366ed038755f940db078d26f5d2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=BE=E5=B1=B1=E8=B2=B4=E8=87=B3?= Date: Wed, 27 May 2026 17:48:00 +0900 Subject: [PATCH] Release v0.4.0 Bump @basou/core, @basou/cli, @basou/sdk, and the (still unpublished) unscoped basou to 0.4.0. This is the first release that goes through the OIDC trusted-publisher pipeline introduced in PR #2: - npm publishes are signed with SLSA provenance v1 attestation - tarballs are republished as signed GitHub Release assets with cosign sign-blob bundles - no `NPM_TOKEN` secret is involved No code changes ride along with this bump - 0.3.1 -> 0.4.0 marks the supply-chain transition, not new functionality. Co-Authored-By: Claude Opus 4.7 (1M context) --- packages/basou/package.json | 2 +- packages/cli/package.json | 2 +- packages/core/package.json | 2 +- packages/sdk/package.json | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/packages/basou/package.json b/packages/basou/package.json index f210a61c..2f7ec356 100644 --- a/packages/basou/package.json +++ b/packages/basou/package.json @@ -1,6 +1,6 @@ { "name": "basou", - "version": "0.3.1", + "version": "0.4.0", "type": "module", "license": "Apache-2.0", "description": "Convenience installer for the @basou/cli command. `npm install -g basou` exposes the same `basou` binary as `npm install -g @basou/cli`.", diff --git a/packages/cli/package.json b/packages/cli/package.json index af4942b0..0a8b3176 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "@basou/cli", - "version": "0.3.1", + "version": "0.4.0", "type": "module", "license": "Apache-2.0", "description": "basou command-line tool", diff --git a/packages/core/package.json b/packages/core/package.json index b0604de9..8cf80c26 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@basou/core", - "version": "0.3.1", + "version": "0.4.0", "type": "module", "license": "Apache-2.0", "description": "Core primitives for Basou: sessions, events, approvals, git capability", diff --git a/packages/sdk/package.json b/packages/sdk/package.json index 34cb28e9..38020c2e 100644 --- a/packages/sdk/package.json +++ b/packages/sdk/package.json @@ -1,6 +1,6 @@ { "name": "@basou/sdk", - "version": "0.3.1", + "version": "0.4.0", "type": "module", "license": "Apache-2.0", "description": "Type-only SDK for Basou adapter authors. v0.1: types only, no runtime.",