Create Tauri Nuxt Nitro App (TNN)

Releasing

Releases are cut locally and published from CI — nothing is ever published from a developer machine.

1. Run pnpm release <patch|minor|major>. This runs scripts/release.ts, which bumps package.json, regenerates CHANGELOG.md via changelogen, commits, creates an annotated vX.Y.Z tag, and pushes both with --follow-tags.
2. The tag push triggers .github/workflows/release.yml, which re-runs vp check/vp test/vp run build, then publishes to npm with provenance using OIDC Trusted Publishing — no NPM_TOKEN secret exists or is needed.
3. On success, CI runs changelogen gh release to create (or update) the GitHub Release for the tag, using the same categorized changelog entry already written to CHANGELOG.md.

If a publish fails for a transient reason (registry hiccup, network blip) after the tag already exists, re-run the workflow manually from the Actions tab using workflow_dispatch with the existing tag name — this retries the publish without creating a new version or tag.

One-time setup

• npm Trusted Publisher: on the package's npm settings page, under Publishing access, add a Trusted Publisher for GitHub Actions pointing at this repository, workflow file release.yml, and environment release.
• GitHub environment: create a release environment in the repo settings (optionally with required reviewers) so publishes can be gated/audited. Its name must match what's configured in the npm Trusted Publisher above.