josh-hemphill/Monup

Monorepo version management, changelog generation, and publishing

Trust Signals

workflow.ymlSHA-pinned

uses: josh-hemphill/monup@3fb7ed67cd47126c7606a49ba09ad015ba999a64 # @monup/workspace@0.2.2

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
command	Command to run: version, changelog, release, github, or all	yes	all
dry-run	Perform dry run only (no publishing or changes)	no	false
log-level	Log level: trace, debug, info, warn, error, silent	no	info
working-directory	Working directory for monup operations	no	.
auth-mode	Authentication mode: token (default, for first publish) or oidc (after trusted publishing configured)	no	token
npm-token	NPM auth token (required when auth-mode is token)	no	—
provenance	Enable npm provenance attestation (only with auth-mode: oidc)	no	true

no outputs