Prepare clean version

.changeset/mean-geckos-sell.md

@@ -0,0 +1,83 @@
+---
+"@siteimprove/alfa-act": minor
+"@siteimprove/alfa-affine": minor
+"@siteimprove/alfa-applicative": minor
+"@siteimprove/alfa-aria": minor
+"@siteimprove/alfa-array": minor
+"@siteimprove/alfa-bits": minor
+"@siteimprove/alfa-branched": minor
+"@siteimprove/alfa-cache": minor
+"@siteimprove/alfa-callback": minor
+"@siteimprove/alfa-cascade": minor
+"@siteimprove/alfa-clone": minor
+"@siteimprove/alfa-collection": minor
+"@siteimprove/alfa-comparable": minor
+"@siteimprove/alfa-compatibility": minor
+"@siteimprove/alfa-continuation": minor
+"@siteimprove/alfa-css": minor
+"@siteimprove/alfa-css-feature": minor
+"@siteimprove/alfa-device": minor
+"@siteimprove/alfa-dom": minor
+"@siteimprove/alfa-earl": minor
+"@siteimprove/alfa-either": minor
+"@siteimprove/alfa-emitter": minor
+"@siteimprove/alfa-encoding": minor
+"@siteimprove/alfa-equatable": minor
+"@siteimprove/alfa-flags": minor
+"@siteimprove/alfa-fnv": minor
+"@siteimprove/alfa-foldable": minor
+"@siteimprove/alfa-functor": minor
+"@siteimprove/alfa-future": minor
+"@siteimprove/alfa-generator": minor
+"@siteimprove/alfa-graph": minor
+"@siteimprove/alfa-hash": minor
+"@siteimprove/alfa-http": minor
+"@siteimprove/alfa-iana": minor
+"@siteimprove/alfa-iterable": minor
+"@siteimprove/alfa-json": minor
+"@siteimprove/alfa-json-ld": minor
+"@siteimprove/alfa-lazy": minor
+"@siteimprove/alfa-list": minor
+"@siteimprove/alfa-map": minor
+"@siteimprove/alfa-mapper": minor
+"@siteimprove/alfa-math": minor
+"@siteimprove/alfa-monad": minor
+"@siteimprove/alfa-network": minor
+"@siteimprove/alfa-option": minor
+"@siteimprove/alfa-parser": minor
+"@siteimprove/alfa-performance": minor
+"@siteimprove/alfa-predicate": minor
+"@siteimprove/alfa-promise": minor
+"@siteimprove/alfa-record": minor
+"@siteimprove/alfa-rectangle": minor
+"@siteimprove/alfa-reducer": minor
+"@siteimprove/alfa-refinement": minor
+"@siteimprove/alfa-result": minor
+"@siteimprove/alfa-rules": minor
+"@siteimprove/alfa-sarif": minor
+"@siteimprove/alfa-selective": minor
+"@siteimprove/alfa-selector": minor
+"@siteimprove/alfa-sequence": minor
+"@siteimprove/alfa-set": minor
+"@siteimprove/alfa-slice": minor
+"@siteimprove/alfa-string": minor
+"@siteimprove/alfa-style": minor
+"@siteimprove/alfa-table": minor
+"@siteimprove/alfa-test": minor
+"@siteimprove/alfa-thenable": minor
+"@siteimprove/alfa-thunk": minor
+"@siteimprove/alfa-time": minor
+"@siteimprove/alfa-toolchain": minor
+"@siteimprove/alfa-trampoline": minor
+"@siteimprove/alfa-tree": minor
+"@siteimprove/alfa-trilean": minor
+"@siteimprove/alfa-tuple": minor
+"@siteimprove/alfa-url": minor
+"@siteimprove/alfa-wcag": minor
+"@siteimprove/alfa-web": minor
+"@siteimprove/alfa-xpath": minor
+---
+
+**Fixed:** The publish flow was updated to a new version.
+
+Some 0.87.\* versions were generating uninstallable package. This should be fixed now.

.github/workflows/alfa-release.yml

@@ -159,9 +159,18 @@ jobs:
         # This is because npm poorly handles the "workspace:" protocol which yarn supports.
         # On the other hand, npm is more flexible in its options for overwriting config file,
         # and can generate provenance statements.
+        #
         # It seems that in some cases npm builds its metadata from the package.json file, and not from the
         # tarball, and thus adds wrong dependencies to "workspace:…" versions that do not exist.
         # Packing in a separate directory forces npm to use the tarball for metadata.
+        #
+        # This was witnessed with npm 10.7.0 in the CI/CD pipeline, but could not be reproduced
+        # locally with the same npm version. npm may change its behaviour, in which case we
+        # could switch do simply use npm for pack+publish, i.e. do
+        # yarn workspaces foreach <options> exec npm publish <options>
+        # Alternatively, if yarn let us overwrite @siteimprove:registry in the CLI, and generate provenance
+        # statements, we could use yarn for the whole process:
+        # yarn workspaces foreach <options> run npm publish <options>
         run: |
           mkdir ${{ github.workspace }}/artifacts
           yarn workspaces foreach --all --no-private --topological-dev pack --out ${{ github.workspace }}/artifacts/%s-%v.tgz
@@ -179,12 +188,9 @@ jobs:
 #        # Overwrite the registry with a CLI option, thus leaving the package.json files untouched.
 #        if: inputs.npm-publish
 #        run: >
-#          npm publish
-#          packages/alfa-*/package.tgz
-#          --tolerate-republish
-#          --provenance
-#          --@siteimprove:registry="https://registry.npmjs.org/"
-#          --tag latest
+#          for package in ${{ github.workspace }}/artifacts/@siteimprove-*.tgz; do
+#            npm publish ${package} --tolerate-republish --provenance --tag latest --@siteimprove:registry="https://registry.npmjs.org/";
+#          done
 #        env:
 #          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}