oh-my-openagent

Files

justsisyphus 8e19ffdce4 ci(publish-platform): separate build/publish jobs with OIDC provenance

- Split into two jobs: build (compile binaries) and publish (npm publish)
- Build job uploads compressed artifacts (tar.gz/zip)
- Publish job downloads artifacts and uses OIDC Trusted Publishing
- Removes NODE_AUTH_TOKEN dependency, uses npm provenance instead
- Increased timeout for large binary uploads (40-120MB)
- Build parallelism increased to 7 (all platforms simultaneously)
- Fixes npm classic token deprecation issue

Benefits:
- Fresh OIDC token at publish time avoids timeout issues
- No token rotation needed (OIDC is ephemeral)
- Build failures isolated from publish failures
- Artifacts can be reused if publish fails

2026-01-30 12:21:24 +09:00

ci.yml

ci: split test execution to prevent mock.module pollution

2026-01-28 15:06:32 +09:00

cla.yml

ci(cla): add repository owner to CLA allowlist (#1195 )

2026-01-28 15:46:42 +09:00

lint-workflows.yml

fix(skill-mcp-manager): prevent memory leaks from orphaned MCP processes (#453 )

2026-01-03 22:15:23 +09:00

publish-platform.yml

ci(publish-platform): separate build/publish jobs with OIDC provenance