From 6fe44ff116c655229dda76221c99301d02a1e956 Mon Sep 17 00:00:00 2001 From: Danny Avila Date: Wed, 10 Dec 2025 09:06:01 -0500 Subject: [PATCH] =?UTF-8?q?=E2=9C=A8=20v0.8.1=20(#10882)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * v0.8.1 * fix: GitHub workflows for OIDC trusted publishing - Added permissions for OIDC trusted publishing in client, data-provider, and data-schemas workflows. - Updated npm installation to support OIDC in all workflows. - Changed npm publish commands to include `--provenance` for better package integrity. - Updated repository URLs in package.json files for client, data-provider, and data-schemas to remove `git+` prefix. --- .github/workflows/client.yml | 14 ++++++++++---- .github/workflows/data-provider.yml | 13 ++++++++++--- .github/workflows/data-schemas.yml | 14 ++++++++++---- Dockerfile | 2 +- Dockerfile.multi | 2 +- api/package.json | 2 +- client/jest.config.cjs | 2 +- client/package.json | 2 +- e2e/jestSetup.js | 2 +- helm/librechat/Chart.yaml | 4 ++-- package-lock.json | 8 ++++---- package.json | 2 +- packages/client/package.json | 4 ++++ packages/data-provider/package.json | 2 +- packages/data-provider/src/config.ts | 2 +- packages/data-schemas/package.json | 2 +- 16 files changed, 50 insertions(+), 27 deletions(-) diff --git a/.github/workflows/client.yml b/.github/workflows/client.yml index 6b97a1e61d..e3e3e445e4 100644 --- a/.github/workflows/client.yml +++ b/.github/workflows/client.yml @@ -13,9 +13,14 @@ on: required: false default: 'Manual publish requested' +permissions: + id-token: write # Required for OIDC trusted publishing + contents: read + jobs: build-and-publish: runs-on: ubuntu-latest + environment: publish # Must match npm trusted publisher config steps: - uses: actions/checkout@v4 @@ -23,6 +28,10 @@ jobs: uses: actions/setup-node@v4 with: node-version: '20.x' + registry-url: 'https://registry.npmjs.org' + + - name: Update npm for OIDC support + run: npm install -g npm@latest # Must be 11.5.1+ for provenance - name: Install client dependencies run: cd packages/client && npm ci @@ -30,9 +39,6 @@ jobs: - name: Build client run: cd packages/client && npm run build - - name: Set up npm authentication - run: echo "//registry.npmjs.org/:_authToken=${{ secrets.PUBLISH_NPM_TOKEN }}" > ~/.npmrc - - name: Check version change id: check working-directory: packages/client @@ -55,4 +61,4 @@ jobs: - name: Publish if: steps.check.outputs.skip != 'true' working-directory: packages/client - run: npm publish *.tgz --access public \ No newline at end of file + run: npm publish *.tgz --access public --provenance diff --git a/.github/workflows/data-provider.yml b/.github/workflows/data-provider.yml index 6e451359a9..9a514b0076 100644 --- a/.github/workflows/data-provider.yml +++ b/.github/workflows/data-provider.yml @@ -13,6 +13,10 @@ on: required: false default: 'Manual publish requested' +permissions: + id-token: write # Required for OIDC trusted publishing + contents: read + jobs: build: runs-on: ubuntu-latest @@ -27,14 +31,17 @@ jobs: publish-npm: needs: build runs-on: ubuntu-latest + environment: publish # Must match npm trusted publisher config steps: - uses: actions/checkout@v4 - uses: actions/setup-node@v4 with: node-version: 20 registry-url: 'https://registry.npmjs.org' + + - name: Update npm for OIDC support + run: npm install -g npm@latest # Must be 11.5.1+ for provenance + - run: cd packages/data-provider && npm ci - run: cd packages/data-provider && npm run build - - run: cd packages/data-provider && npm publish - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} + - run: cd packages/data-provider && npm publish --provenance diff --git a/.github/workflows/data-schemas.yml b/.github/workflows/data-schemas.yml index ee2d9c30d7..882dc4f4b6 100644 --- a/.github/workflows/data-schemas.yml +++ b/.github/workflows/data-schemas.yml @@ -13,9 +13,14 @@ on: required: false default: 'Manual publish requested' +permissions: + id-token: write # Required for OIDC trusted publishing + contents: read + jobs: build-and-publish: runs-on: ubuntu-latest + environment: publish # Must match npm trusted publisher config steps: - uses: actions/checkout@v4 @@ -23,6 +28,10 @@ jobs: uses: actions/setup-node@v4 with: node-version: '20.x' + registry-url: 'https://registry.npmjs.org' + + - name: Update npm for OIDC support + run: npm install -g npm@latest # Must be 11.5.1+ for provenance - name: Install dependencies run: cd packages/data-schemas && npm ci @@ -30,9 +39,6 @@ jobs: - name: Build run: cd packages/data-schemas && npm run build - - name: Set up npm authentication - run: echo "//registry.npmjs.org/:_authToken=${{ secrets.PUBLISH_NPM_TOKEN }}" > ~/.npmrc - - name: Check version change id: check working-directory: packages/data-schemas @@ -55,4 +61,4 @@ jobs: - name: Publish if: steps.check.outputs.skip != 'true' working-directory: packages/data-schemas - run: npm publish *.tgz --access public \ No newline at end of file + run: npm publish *.tgz --access public --provenance diff --git a/Dockerfile b/Dockerfile index 9482c2fd3a..7cda70178b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -# v0.8.1-rc2 +# v0.8.1 # Base node image FROM node:20-alpine AS node diff --git a/Dockerfile.multi b/Dockerfile.multi index 21c073b750..c106b5e5fa 100644 --- a/Dockerfile.multi +++ b/Dockerfile.multi @@ -1,5 +1,5 @@ # Dockerfile.multi -# v0.8.1-rc2 +# v0.8.1 # Base for all builds FROM node:20-alpine AS base-min diff --git a/api/package.json b/api/package.json index 4758c7bb0d..efee26920a 100644 --- a/api/package.json +++ b/api/package.json @@ -1,6 +1,6 @@ { "name": "@librechat/backend", - "version": "v0.8.1-rc2", + "version": "v0.8.1", "description": "", "scripts": { "start": "echo 'please run this from the root directory'", diff --git a/client/jest.config.cjs b/client/jest.config.cjs index 24e1f4463f..c62430d22f 100644 --- a/client/jest.config.cjs +++ b/client/jest.config.cjs @@ -1,4 +1,4 @@ -/** v0.8.1-rc2 */ +/** v0.8.1 */ module.exports = { roots: ['/src'], testEnvironment: 'jsdom', diff --git a/client/package.json b/client/package.json index f3aa22626d..aef5f4697a 100644 --- a/client/package.json +++ b/client/package.json @@ -1,6 +1,6 @@ { "name": "@librechat/frontend", - "version": "v0.8.1-rc2", + "version": "v0.8.1", "description": "", "type": "module", "scripts": { diff --git a/e2e/jestSetup.js b/e2e/jestSetup.js index c8158e6a5d..481e47bee9 100644 --- a/e2e/jestSetup.js +++ b/e2e/jestSetup.js @@ -1,3 +1,3 @@ -// v0.8.1-rc2 +// v0.8.1 // See .env.test.example for an example of the '.env.test' file. require('dotenv').config({ path: './e2e/.env.test' }); diff --git a/helm/librechat/Chart.yaml b/helm/librechat/Chart.yaml index ca7ad0e932..cf208fdd60 100755 --- a/helm/librechat/Chart.yaml +++ b/helm/librechat/Chart.yaml @@ -15,7 +15,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 1.9.3 +version: 1.9.4 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to @@ -23,7 +23,7 @@ version: 1.9.3 # It is recommended to use it with quotes. # renovate: image=ghcr.io/danny-avila/librechat -appVersion: "v0.8.1-rc2" +appVersion: "v0.8.1" home: https://www.librechat.ai diff --git a/package-lock.json b/package-lock.json index 2d574da737..b39629902a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "LibreChat", - "version": "v0.8.1-rc2", + "version": "v0.8.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "LibreChat", - "version": "v0.8.1-rc2", + "version": "v0.8.1", "license": "ISC", "workspaces": [ "api", @@ -45,7 +45,7 @@ }, "api": { "name": "@librechat/backend", - "version": "v0.8.1-rc2", + "version": "v0.8.1", "license": "ISC", "dependencies": { "@anthropic-ai/sdk": "^0.52.0", @@ -446,7 +446,7 @@ }, "client": { "name": "@librechat/frontend", - "version": "v0.8.1-rc2", + "version": "v0.8.1", "license": "ISC", "dependencies": { "@ariakit/react": "^0.4.15", diff --git a/package.json b/package.json index 3f97cd0c50..1062c62d2b 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "LibreChat", - "version": "v0.8.1-rc2", + "version": "v0.8.1", "description": "", "workspaces": [ "api", diff --git a/packages/client/package.json b/packages/client/package.json index 9a2859cad3..a63edb2fcd 100644 --- a/packages/client/package.json +++ b/packages/client/package.json @@ -2,6 +2,10 @@ "name": "@librechat/client", "version": "0.4.0", "description": "React components for LibreChat", + "repository": { + "type": "git", + "url": "https://github.com/danny-avila/LibreChat" + }, "main": "dist/index.js", "module": "dist/index.es.js", "types": "dist/types/index.d.ts", diff --git a/packages/data-provider/package.json b/packages/data-provider/package.json index fd3a50f26b..520d37dfde 100644 --- a/packages/data-provider/package.json +++ b/packages/data-provider/package.json @@ -30,7 +30,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/danny-avila/LibreChat.git" + "url": "https://github.com/danny-avila/LibreChat" }, "author": "", "license": "ISC", diff --git a/packages/data-provider/src/config.ts b/packages/data-provider/src/config.ts index 72fcdafc96..be8cfe0d62 100644 --- a/packages/data-provider/src/config.ts +++ b/packages/data-provider/src/config.ts @@ -1586,7 +1586,7 @@ export enum TTSProviders { /** Enum for app-wide constants */ export enum Constants { /** Key for the app's version. */ - VERSION = 'v0.8.1-rc2', + VERSION = 'v0.8.1', /** Key for the Custom Config's version (librechat.yaml). */ CONFIG_VERSION = '1.3.1', /** Standard value for the first message's `parentMessageId` value, to indicate no parent exists. */ diff --git a/packages/data-schemas/package.json b/packages/data-schemas/package.json index 0cbe5c29d5..17370e471f 100644 --- a/packages/data-schemas/package.json +++ b/packages/data-schemas/package.json @@ -28,7 +28,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/danny-avila/LibreChat.git" + "url": "https://github.com/danny-avila/LibreChat" }, "author": "", "license": "MIT",