From fcd23de6494ecc335d59b4ee090fae1d5c2400d4 Mon Sep 17 00:00:00 2001 From: Michael Gasperini Date: Sun, 1 Nov 2026 01:37:27 +0100 Subject: [PATCH] docs: align release flow with trusted publishing --- AGENTS.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/AGENTS.md b/AGENTS.md index b9ec6e9..b345578 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -121,9 +121,9 @@ npm version --no-git-tag-version # updates package.json an # Update CITATION.cff and CHANGELOG.md to the same version before validation. npm run preflight git tag v && git push origin v -gh release create v --title "..." --notes-file -# Then dispatch the Release workflow with the release tag; it publishes the released -# VSIX to both registries through OIDC trusted publishing. +# The tag push runs the Release workflow, which creates the GitHub release with the +# VSIX and checksum. Then dispatch the same workflow with the release tag; it +# publishes the released VSIX to both registries through OIDC trusted publishing. ``` Publishing stays owner-controlled: no tag-triggered publish. Dispatch the Release workflow manually