Skip to content

🐛 fix(release): point package.json repository URLs at evmts/tevm - #2091

Merged
roninjin10 merged 1 commit into
mainfrom
fix/repo-url-provenance
Jul 30, 2026
Merged

🐛 fix(release): point package.json repository URLs at evmts/tevm#2091
roninjin10 merged 1 commit into
mainfrom
fix/repo-url-provenance

Conversation

@roninjin10

@roninjin10 roninjin10 commented Jul 30, 2026

Copy link
Copy Markdown
Collaborator

The failure

Every package fails to publish with E422:

npm error 422 Unprocessable Entity - PUT https://registry.npmjs.org/tevm
Error verifying sigstore provenance bundle: Failed to validate repository information:
package.json: "repository.url" is "git+https://github.com/evmts/tevm-monorepo.git",
expected to match "https://github.com/evmts/tevm" from provenance

Cause

The repo was renamed evmts/tevm-monorepoevmts/tevm. GitHub redirects the old URL, so nothing looked broken — but the OIDC provenance statement carries the current repository name, and npm validates it against repository.url in package.json. All 85 package.json files still declared the old name, so the package signed successfully and then failed verification at the registry.

This is the same class of rename fallout as the four release workflows that were gated on github.repository == 'evmts/tevm-monorepo' (fixed in #2083).

Change

All 85 package.json repository URLs updated. JSON validity verified across every file.

Publishing is blocked until this merges.

🤖 Generated with Smithers multi-agent orchestration

Summary by CodeRabbit

  • Chores
    • Updated repository links across all package metadata to point to the current project repository.
    • No package functionality, dependencies, scripts, exports, or configuration behavior changed.

npm provenance verification rejects every publish with E422:

  "repository.url" is "git+https://github.com/evmts/tevm-monorepo.git",
  expected to match "https://github.com/evmts/tevm" from provenance

The repo was renamed evmts/tevm-monorepo -> evmts/tevm. GitHub redirects the
URL, so nothing appeared broken, but the OIDC provenance statement carries the
CURRENT repository name and npm compares it against package.json. Every one of
the 85 package.json files still declared the old URL, so signing succeeded and
verification then failed.

Updates all 85 package.json repository URLs. Publishing is blocked until this
lands.
@vercel

vercel Bot commented Jul 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
node Ready Ready Preview Jul 30, 2026 5:08pm
tevm-monorepo-app Ready Ready Preview Jul 30, 2026 5:08pm
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
tevm-monorepo-tevm Ignored Ignored Jul 30, 2026 5:08pm

Request Review

@roninjin10
roninjin10 merged commit 6199d04 into main Jul 30, 2026
7 of 13 checks passed
@roninjin10
roninjin10 deleted the fix/repo-url-provenance branch July 30, 2026 17:07
@changeset-bot

changeset-bot Bot commented Jul 30, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 6e07f7c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@claude

claude Bot commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

Claude encountered an error —— View job


I'll analyze this and get back to you.

@coderabbitai

coderabbitai Bot commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 35c5a17b-6c2f-45dc-9afe-67714eee5c25

📥 Commits

Reviewing files that changed from the base of the PR and between 08d3c3c and 6e07f7c.

📒 Files selected for processing (85)
  • bundler-packages/base-bundler/package.json
  • bundler-packages/bun/package.json
  • bundler-packages/bundler-cache/package.json
  • bundler-packages/compiler/package.json
  • bundler-packages/config/package.json
  • bundler-packages/esbuild/package.json
  • bundler-packages/mud/package.json
  • bundler-packages/requirejs/package.json
  • bundler-packages/resolutions-rs/npm/darwin-arm64/package.json
  • bundler-packages/resolutions-rs/npm/darwin-x64/package.json
  • bundler-packages/resolutions-rs/npm/freebsd-x64/package.json
  • bundler-packages/resolutions-rs/npm/linux-arm-gnueabihf/package.json
  • bundler-packages/resolutions-rs/npm/linux-arm64-gnu/package.json
  • bundler-packages/resolutions-rs/npm/linux-arm64-musl/package.json
  • bundler-packages/resolutions-rs/npm/linux-x64-musl/package.json
  • bundler-packages/resolutions-rs/npm/wasm32-wasi/package.json
  • bundler-packages/resolutions-rs/npm/win32-arm64-msvc/package.json
  • bundler-packages/resolutions-rs/npm/win32-ia32-msvc/package.json
  • bundler-packages/resolutions-rs/package.json
  • bundler-packages/resolutions/package.json
  • bundler-packages/rollup/package.json
  • bundler-packages/rspack/package.json
  • bundler-packages/runtime-rs/npm/darwin-arm64/package.json
  • bundler-packages/runtime-rs/npm/darwin-x64/package.json
  • bundler-packages/runtime-rs/npm/freebsd-x64/package.json
  • bundler-packages/runtime-rs/npm/linux-arm-gnueabihf/package.json
  • bundler-packages/runtime-rs/npm/linux-arm64-gnu/package.json
  • bundler-packages/runtime-rs/npm/linux-arm64-musl/package.json
  • bundler-packages/runtime-rs/npm/linux-x64-musl/package.json
  • bundler-packages/runtime-rs/npm/wasm32-wasi/package.json
  • bundler-packages/runtime-rs/npm/win32-arm64-msvc/package.json
  • bundler-packages/runtime-rs/npm/win32-ia32-msvc/package.json
  • bundler-packages/runtime-rs/package.json
  • bundler-packages/runtime/package.json
  • bundler-packages/solc/package.json
  • bundler-packages/tevm-run/package.json
  • bundler-packages/unplugin/package.json
  • bundler-packages/vite/package.json
  • bundler-packages/webpack/package.json
  • bundler-packages/whatsabi/package.json
  • cli/package.json
  • compiler/package.json
  • configs/tsconfig/package.json
  • configs/tsupconfig/package.json
  • extensions/ethers/package.json
  • extensions/test-matchers/package.json
  • extensions/test-node/package.json
  • extensions/viem/package.json
  • lsp/lsp/package.json
  • lsp/ts-plugin/package.json
  • lsp/vscode/package.json
  • package.json
  • packages/actions/package.json
  • packages/address/package.json
  • packages/block/package.json
  • packages/blockchain/package.json
  • packages/client-types/package.json
  • packages/common/package.json
  • packages/consensus/package.json
  • packages/contract/package.json
  • packages/decorators/package.json
  • packages/effect/package.json
  • packages/errors/package.json
  • packages/evm/package.json
  • packages/http-client/package.json
  • packages/jsonrpc/package.json
  • packages/logger/package.json
  • packages/memory-client/package.json
  • packages/node/package.json
  • packages/precompiles/package.json
  • packages/predeploys/package.json
  • packages/procedures/package.json
  • packages/receipt-manager/package.json
  • packages/rlp/package.json
  • packages/server/package.json
  • packages/state/package.json
  • packages/sync-storage-persister/package.json
  • packages/trie/package.json
  • packages/tx/package.json
  • packages/txpool/package.json
  • packages/utils/package.json
  • packages/vm/package.json
  • test/bench/package.json
  • test/test-utils/package.json
  • tevm/package.json

📝 Walkthrough

Walkthrough

The pull request updates repository.url from evmts/tevm-monorepo to evmts/tevm across package manifests. No code, dependencies, scripts, exports, or other metadata are changed.

Changes

Repository metadata

Layer / File(s) Summary
Bundler package metadata
bundler-packages/**/package.json
Bundler and platform-specific manifests now reference the evmts/tevm Git repository.
Tooling and integration metadata
cli/package.json, compiler/package.json, configs/*/package.json, extensions/*/package.json, lsp/*/package.json, package.json
CLI, configuration, extension, language tooling, and root manifests update their repository URLs.
Core and test package metadata
packages/*/package.json, test/*/package.json, tevm/package.json
Core library, test utility, benchmark, and package manifests now reference evmts/tevm.

Estimated code review effort: 1 (Trivial) | ~3 minutes

✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Fix failing CI checks
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/repo-url-provenance

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install failed: dependency version conflict. Check your lock file or package.json.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant