fix(npm): point generated packages at pnpm/pacquet repo

The publish job uses npm trusted publishing with --provenance. npm's
provenance verifier compares package.json's repository.url against the
GitHub repo recorded in the OIDC-signed provenance bundle and rejects
the publish when they disagree:

  Error verifying sigstore provenance bundle: Failed to validate
  repository information: package.json: "repository.url" is
  "https://github.com/anonrig/pacquet", expected to match
  "https://github.com/pnpm/pacquet" from provenance

The main npm/pacquet/package.json was already updated to pnpm/pacquet,
but the per-platform packages emitted by generate-packages.mjs still
hardcoded the old anonrig URL. Update the URL there, and fix the same
stale reference in the bin shim's "no prebuilt binary" error message
so users land on the right issue tracker.
This commit is contained in:
Zoltan Kochan
2026-04-27 01:09:43 +02:00
parent 4d4631f36a
commit 9d0d3f235c
2 changed files with 2 additions and 2 deletions

View File

@@ -41,7 +41,7 @@ if (binPath) {
} else {
console.error(
"The pacquet CLI package doesn't ship with prebuilt binaries for your platform yet. " +
"You can create an issue at https://github.com/anonrig/pacquet/issues for support."
"You can create an issue at https://github.com/pnpm/pacquet/issues for support."
);
process.exitCode = 1;
}

View File

@@ -36,7 +36,7 @@ function generateNativePackage(platform, arch) {
cpu: [arch],
repository: {
type: "git",
url: "https://github.com/anonrig/pacquet",
url: "https://github.com/pnpm/pacquet",
},
}, null, 2);