fix: publish workflow and provenance errors

matthew-dean · matthew-dean · commit 5a1b4257eff1 · 2026-03-10T10:38:52.000-07:00
- Add repository field to test-data package.json (fixes npm OIDC
  provenance verification failure)
- Skip publish workflow on forks (only run on less/less.js)
- Remove duplicate require('fs') in bump-and-publish.js
- Add language specifier to markdown code block in CONTRIBUTING.md
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -17,8 +17,8 @@ jobs:
   publish:
     name: Publish to NPM
     runs-on: ubuntu-latest
-    # Only run on push events, not pull requests
-    if: github.event_name == 'push'
+    # Only run on the upstream repo, not forks
+    if: github.repository == 'less/less.js'
     
     steps:
       - name: Checkout code
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -108,7 +108,7 @@ The publish script (`scripts/bump-and-publish.js`) auto-increments the patch ver
 
 **Option 1: Commit message** — include `version: X.Y.Z` in the commit body:
 
-```
+```text
 feat: new feature
 
 version: 4.6.0
diff --git a/packages/test-data/package.json b/packages/test-data/package.json
@@ -10,5 +10,10 @@
 		"The Core Less Team"
 	],
 	"license": "Apache-2.0",
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/less/less.js.git",
+		"directory": "packages/test-data"
+	},
 	"gitHead": "1df9072ee9ebdadc791bf35dfb1dbc3ef9f1948f"
 }
diff --git a/scripts/bump-and-publish.js b/scripts/bump-and-publish.js
@@ -485,7 +485,6 @@ function main() {
   
   // Output version for GitHub Actions
   if (process.env.GITHUB_OUTPUT) {
-    const fs = require('fs');
     fs.appendFileSync(process.env.GITHUB_OUTPUT, `version=${nextVersion}\n`);
     fs.appendFileSync(process.env.GITHUB_OUTPUT, `tag=${tagName}\n`);
   }

Original file line number	Diff line number	Diff line change
`@@ -485,7 +485,6 @@ function main() {`
`485`	`485`
`486`	`486`	`// Output version for GitHub Actions`
`487`	`487`	`if (process.env.GITHUB_OUTPUT) {`
`488`		`- const fs = require('fs');`
`489`	`488`	fs.appendFileSync(process.env.GITHUB_OUTPUT, `version=${nextVersion}\n`);
`490`	`489`	fs.appendFileSync(process.env.GITHUB_OUTPUT, `tag=${tagName}\n`);
`491`	`490`	`}`