mirror of
https://github.com/pnpm/pnpm.git
synced 2026-07-14 01:32:40 -04:00
702ad5f860
* fix: update embedded Node.js release keys nodejs/release-keys added a new release key (Stewart X Addison, 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD), which made the check:node-release-keys release gate fail. Sync the embedded keys via update-node-release-keys.mjs --update. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * ci: add create-release-pr workflow with automatic trust-root refresh Port the create-release-pr workflow from main to v10: it prepares a release-pr/<target> branch, refreshes the embedded npm signing keys and Node.js release keys (with synthesized changesets and an explicit PR comment when a trust root drifted), runs pnpm bump, and opens or updates the release PR. Keeping the keys refreshed at release-PR time prevents the release workflow's key-sync gates from failing after an upstream key rotation. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * ci: pass the target ref to git fetch after an end-of-options separator Hardens the create-release-pr workflow against a dispatch input that starts with "--" being parsed as a git option instead of a refspec. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>