fix: release through cyberuni OIDC workflows, no repo secrets

.changeset/secretless-release-cyberuni.md

@@ -0,0 +1,10 @@
+---
+'@unional/async-context': patch
+'@unional/gizmo': patch
+'async-fp': patch
+---
+
+Point repository metadata at `cyberuni/async-fp` following the org transfer, and release
+through GitHub OIDC / npm trusted publishing instead of a stored `NPM_TOKEN`.
+
+No runtime change.

.github/workflows/pull-request.yml

@@ -2,7 +2,11 @@ name: pull-request
 on:
   pull_request:
     types: [opened, synchronize]
+  merge_group:
 
 jobs:
   code:
-    uses: unional/.github/.github/workflows/pnpm-verify-linux.yml@main
+    uses: cyberuni/.github/.github/workflows/pnpm-verify.yml@v2
+    with:
+      os: '["ubuntu-latest"]'
+      skip-playwright: true

.github/workflows/release.yml

@@ -5,13 +5,32 @@ on:
 
 jobs:
   code:
-    uses: unional/.github/.github/workflows/pnpm-verify-linux.yml@main
+    uses: cyberuni/.github/.github/workflows/pnpm-verify.yml@v2
+    with:
+      os: '["ubuntu-latest"]'
+      skip-playwright: true
+
+  # Runs on the default branch immediately before `changeset publish`, so a tarball that
+  # trips the gate blocks the release. It used to sit on the changesets "Version
+  # Packages" PR instead, where it could never fire: a PR opened with the built-in
+  # GITHUB_TOKEN does not trigger `on: pull_request`, so that PR gets zero checks and
+  # the job attached to it was never once executed.
+  #
+  # A `needs:` of release, so it also runs on pushes that only open or update the
+  # Version PR rather than publish. Deliberate — it fails closed.
+  publish-gate:
+    uses: cyberuni/.github/.github/workflows/pnpm-publish-gate.yml@v2
+    permissions:
+      contents: read
 
   release:
-    uses: unional/.github/.github/workflows/pnpm-release-changeset.yml@main
-    needs: code
-    secrets: inherit
+    uses: cyberuni/.github/.github/workflows/pnpm-release-changeset-oidc.yml@v2
+    needs: [code, publish-gate]
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
 
   # docgen:
-  #     uses: unional/.github/.github/workflows/pnpm-docs.yml@main
+  #     uses: cyberuni/.github/.github/workflows/pnpm-docs.yml@v2
   #     needs: release

README.md

@@ -72,20 +72,20 @@ obj.foo.blow()
 [async-context-downloads-url]: https://npmjs.org/package/@unional/async-context
 [async-context-npm-image]: https://img.shields.io/npm/v/@unional/async-context.svg?style=flat
 [async-context-npm-url]: https://npmjs.org/package/@unional/async-context
-[async-context-pkg-url]: https://github.com/unional/async-fp/tree/main/packages/async-context
+[async-context-pkg-url]: https://github.com/cyberuni/async-fp/tree/main/packages/async-context
 [async-fp-bundlephobia-image]: https://img.shields.io/bundlephobia/minzip/async-fp.svg
 [async-fp-bundlephobia-url]: https://bundlephobia.com/result?p=async-fp
 [async-fp-downloads-image]: https://img.shields.io/npm/dm/async-fp.svg?style=flat
 [async-fp-downloads-url]: https://npmjs.org/package/async-fp
 [async-fp-npm-image]: https://img.shields.io/npm/v/async-fp.svg?style=flat
 [async-fp-npm-url]: https://npmjs.org/package/async-fp
-[async-fp-pkg-url]: https://github.com/unional/async-fp/tree/main/packages/async-fp
-[codecov-image]: https://codecov.io/gh/unional/async-fp/branch/main/graph/badge.svg
-[codecov-url]: https://codecov.io/gh/unional/async-fp
-[github-action-url]: https://github.com/unional/async-fp/actions
-[github-nodejs]: https://github.com/unional/async-fp/workflows/release/badge.svg
+[async-fp-pkg-url]: https://github.com/cyberuni/async-fp/tree/main/packages/async-fp
+[codecov-image]: https://codecov.io/gh/cyberuni/async-fp/branch/main/graph/badge.svg
+[codecov-url]: https://codecov.io/gh/cyberuni/async-fp
+[github-action-url]: https://github.com/cyberuni/async-fp/actions
+[github-nodejs]: https://github.com/cyberuni/async-fp/workflows/release/badge.svg
 [introduction_video]: https://youtu.be/9EnrSJdvP48
-[@unional/gizmo]: https://github.com/unional/async-fp/tree/main/packages/gizmo
+[@unional/gizmo]: https://github.com/cyberuni/async-fp/tree/main/packages/gizmo
 [gizmo-bundlephobia-image]: https://img.shields.io/bundlephobia/minzip/@unional/gizmo.svg
 [gizmo-bundlephobia-url]: https://bundlephobia.com/result?p=@unional/gizmo
 [gizmo-downloads-image]: https://img.shields.io/npm/dm/@unional/gizmo.svg?style=flat

packages/async-context/README.md

@@ -210,8 +210,8 @@ configure({ ... })
 
 [bundlephobia-image]: https://img.shields.io/bundlephobia/minzip/@unional/async-context.svg
 [bundlephobia-url]: https://bundlephobia.com/result?p=@unional/async-context
-[codecov-image]: https://codecov.io/gh/unional/async-fp/branch/main/graph/badge.svg
-[codecov-url]: https://codecov.io/gh/unional/async-fp
+[codecov-image]: https://codecov.io/gh/cyberuni/async-fp/branch/main/graph/badge.svg
+[codecov-url]: https://codecov.io/gh/cyberuni/async-fp
 [downloads-image]: https://img.shields.io/npm/dm/@unional/async-context.svg?style=flat
 [downloads-url]: https://npmjs.org/package/@unional/async-context
 [introduction_video]: https://youtu.be/9EnrSJdvP48

packages/async-context/package.json

@@ -9,13 +9,13 @@
 		"functional",
 		"typescript"
 	],
-	"homepage": "https://github.com/unional/async-fp/tree/main/packages/async-context",
+	"homepage": "https://github.com/cyberuni/async-fp/tree/main/packages/async-context",
 	"bugs": {
-		"url": "https://github.com/unional/async-fp/issues"
+		"url": "https://github.com/cyberuni/async-fp/issues"
 	},
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/unional/async-fp.git",
+		"url": "https://github.com/cyberuni/async-fp.git",
 		"directory": "packages/async-context"
 	},
 	"license": "MIT",

packages/async-fp/README.md

@@ -44,12 +44,12 @@ const value = await asyncAssert(Promise.resolve({ a: 1 }), v => {
 })
 ```
 
-[async_assert]: https://github.com/unional/async-fp/blob/main/packages/async-fp/ts/async_assert.ts
-[async_context]: https://github.com/unional/async-fp/blob/main/packages/async-context/ts/AsyncContext.ts
+[async_assert]: https://github.com/cyberuni/async-fp/blob/main/packages/async-fp/ts/async_assert.ts
+[async_context]: https://github.com/cyberuni/async-fp/blob/main/packages/async-context/ts/AsyncContext.ts
 [bundlephobia-image]: https://img.shields.io/bundlephobia/minzip/async-fp.svg
 [bundlephobia-url]: https://bundlephobia.com/result?p=async-fp
-[codecov-image]: https://codecov.io/gh/unional/async-fp/branch/main/graph/badge.svg
-[codecov-url]: https://codecov.io/gh/unional/async-fp
+[codecov-image]: https://codecov.io/gh/cyberuni/async-fp/branch/main/graph/badge.svg
+[codecov-url]: https://codecov.io/gh/cyberuni/async-fp
 [downloads-image]: https://img.shields.io/npm/dm/async-fp.svg?style=flat
 [downloads-url]: https://npmjs.org/package/async-fp
 [npm-image]: https://img.shields.io/npm/v/async-fp.svg?style=flat

packages/async-fp/package.json

@@ -9,13 +9,13 @@
 		"functional",
 		"typescript"
 	],
-	"homepage": "https://github.com/unional/async-fp/tree/main/packages/async-fp",
+	"homepage": "https://github.com/cyberuni/async-fp/tree/main/packages/async-fp",
 	"bugs": {
-		"url": "https://github.com/unional/async-fp/issues"
+		"url": "https://github.com/cyberuni/async-fp/issues"
 	},
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/unional/async-fp.git",
+		"url": "https://github.com/cyberuni/async-fp.git",
 		"directory": "packages/async-fp"
 	},
 	"license": "MIT",

packages/gizmo/README.md

@@ -429,10 +429,10 @@ It is used to compose objects that are used throughout the application,
 and you typically only need to create one such object.
 
 [@just-web]: https://github.com/justland/just-web
-[@unional/gizmo]: https://github.com/unional/async-fp/tree/main/packages/gizmo
-[async-fp]: https://github.com/unional/async-fp/tree/main/packages/async-fp
-[codecov-image]: https://codecov.io/gh/unional/async-fp/branch/master/graph/badge.svg
-[codecov-url]: https://codecov.io/gh/unional/async-fp
+[@unional/gizmo]: https://github.com/cyberuni/async-fp/tree/main/packages/gizmo
+[async-fp]: https://github.com/cyberuni/async-fp/tree/main/packages/async-fp
+[codecov-image]: https://codecov.io/gh/cyberuni/async-fp/branch/main/graph/badge.svg
+[codecov-url]: https://codecov.io/gh/cyberuni/async-fp
 [gizmo-bundlephobia-image]: https://img.shields.io/bundlephobia/minzip/@unional/gizmo.svg
 [gizmo-bundlephobia-url]: https://bundlephobia.com/result?p=@unional/gizmo
 [gizmo-downloads-image]: https://img.shields.io/npm/dm/@unional/gizmo.svg?style=flat

packages/gizmo/package.json

@@ -2,13 +2,13 @@
 	"name": "@unional/gizmo",
 	"version": "2.3.1",
 	"description": "Building gizmos",
-	"homepage": "https://github.com/unional/async-fp/tree/main/packages/gizmo#readme",
+	"homepage": "https://github.com/cyberuni/async-fp/tree/main/packages/gizmo#readme",
 	"bugs": {
-		"url": "https://github.com/unional/async-fp/issues"
+		"url": "https://github.com/cyberuni/async-fp/issues"
 	},
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/unional/async-fp.git",
+		"url": "https://github.com/cyberuni/async-fp.git",
 		"directory": "packages/gizmo"
 	},
 	"license": "MIT",