2 Commits
Author SHA1 Message Date
GROKandClaude Opus 5 2d746c0d33 chore: gitignore output/ and tmp/ demo-PDF artifacts
ci / build-and-design (push) Failing after 2s
Both are generated by scripts/build_demo_pdf.py — output/ holds the
rendered demo.pdf, tmp/ the intermediate page PNGs it rasterizes on the
way there (~2 MB of them).

Same category as the existing dist-* entries, so grouped with them.

scripts/build_demo_pdf.py itself is deliberately left untracked rather
than ignored — it is source, not output, and whether it belongs in the
repo is a separate call.

Co-Authored-By: Claude Opus 5 <[email protected]>
2026-08-07 15:14:10 -05:00
GROKandClaude Opus 5 10a29ded6a chore: gitignore .npmrc so a registry token can't be committed
ci / build-and-design (push) Failing after 3s
Publishing to the Gitea npm registry needs an _authToken, and the natural
place to put it is a .npmrc in the repo root — which was not ignored. The
committed .npmrc.example invites exactly that mistake.

The pattern matches the exact filename, so .npmrc.example is unaffected.

Nothing was leaked: no .npmrc has ever been committed here. This is
preventative.

Better still, publish with `npm publish --userconfig <path outside the
repo>` and keep the token out of the working tree entirely — that is how
v0.5.0 was published.

Co-Authored-By: Claude Opus 5 <[email protected]>
2026-08-07 15:00:35 -05:00
+12
View File
@@ -4,6 +4,11 @@ dist-showcase/
dist-demo/
*.log
.DS_Store
# Generated by scripts/build_demo_pdf.py — the rendered demo PDF and the
# intermediate page PNGs it rasterizes on the way there (~2 MB).
output/
tmp/
# impeccable-ignore-start
.impeccable/config.local.json
.impeccable/hook.cache.json
@@ -14,3 +19,10 @@ dist-demo/
# tsup temp (mount cannot unlink)
tsup.config.bundled_*.mjs
# A real .npmrc carries the Gitea registry _authToken — never commit it.
# This pattern matches the exact filename only, so .npmrc.example (which is
# meant to be committed) is unaffected.
# Publishing from a clone: prefer `npm publish --userconfig <path outside the
# repo>` over writing a token into the working tree at all.
.npmrc