The root project is private. The p5-analysis and p5-server workspaces are
published independently to npm.
Add a Changeset for each user-visible change:
bun run changesetCommits merged to main cause the release workflow to open or update a version
pull request. That pull request updates package versions, changelogs, and the
lockfile. Merging the version pull request runs the full check suite and
publishes changed packages to npm.
p5-analysis is versioned before p5-server so that the server's dependency
always refers to an available analysis package.
Each npm package must trust osteele/p5-server and the release.yml GitHub
Actions workflow for publication. The workflow uses npm trusted publishing, so
it does not require a long-lived npm token. npm adds provenance attestations to
the published packages automatically.