mirror of
https://github.com/pnpm/pnpm.git
synced 2026-06-28 01:45:30 -04:00
6379dc1a88
The TypeScript stack was relocated under pnpm11/ in pnpm/pnpm#12537, which moved copy-artifacts.ts to pnpm11/__utils__/scripts/src/. Its `import.meta.dirname` + '../../..' now resolves to the pnpm11/ directory instead of the repository root, so `pn copy-artifacts` wrote the release tarballs to pnpm11/dist. The Release workflow attests (`subject-path: 'dist/*'`) and uploads (`files: dist/*`) from the repo-root dist, so a tagged release would have produced a GitHub Release with no binary assets and a failing provenance attestation, even though the npm publishes (filtered by package name) still succeeded. Resolve repoRoot to the actual repository root again and point the artifact source directories at their new pnpm11/pnpm/ locations.