# Release: bug report rules and npm Trusted Publisher

[sergak01]

Release: bug report rules and npm Trusted Publisher

Summary

Promote develop to main with new QA rule templates, npm Trusted Publisher (OIDC) for production releases, and the 1.1.0-beta.1 changelog from semantic-release on develop. Merging to main is expected to trigger a stable v* tag and publish to registry.npmjs.org via .github/workflows/release.yml.

Key changes

Rules

• Add bug report template for Cursor (.mdc) and Claude (.md).
• Add optional preconditions section to the bug report template.

CI / publishing

• Switch production npm publish from NPM_TOKEN to npm Trusted Publisher (OIDC): id-token: write, unset NODE_AUTH_TOKEN before publish.
• Document Trusted Publisher setup in README.md and CLAUDE.md; fix registry description (public npm, not GitHub Packages).

Release metadata

• CHANGELOG.md updated for 1.1.0-beta.1.
• package.json / package-lock.json at 1.1.0-beta.1 (stable version bump may occur on main per your release process).

Prerequisites (before merge)

• Trusted publishing configured on npmjs.com for @metricinsights/qa-ai-rules:
  • Organization / user: mi-examples
  • Repository: qa-ai-rules
  • Workflow filename: release.yml
• Confirm NPM_TOKEN is no longer required for the release workflow (or remove after first successful OIDC publish).

Testing

• After merge, verify Production Release runs on the stable v* tag and publishes successfully without NPM_TOKEN.
• In a consuming repo, run npx qa-ai-rules init and confirm new bug-report-template rules install for enabled tools.
• Optional: restrict token-based publishing on npm after first OIDC release.

Included commits

• 03dd0b2 — Merge pull request ci(release): publish to npm via Trusted Publisher (OIDC) #5 from mi-examples/trusted-publisher
• 684662c — ci(release): publish to npm via Trusted Publisher (OIDC)
• a657e21 — chore(release): 1.1.0-beta.1 [skip ci]
• 20f7656 — Merge pull request PP-3477: Add bug-report-template.md to qa-ai-rules repo #4 from mi-examples/PP-3477
• 10477d8 — feat(rules): add optional preconditions to bug report template
• 7bf6a92 — feat(rules): add bug report template

 .github/workflows/release.yml       |  8 +++++---
 CHANGELOG.md                        |  8 ++++++++
 CLAUDE.md                           | 18 +++++++++++++++++-
 README.md                           | 16 ++++++++++++++++
 package-lock.json                   |  4 ++--
 package.json                        |  2 +-
 rules/claude/bug-report-template.md | 17 +++++++++++++++++
 rules/cursor/bug-report-template.md | 18 ++++++++++++++++++
 8 files changed, 84 insertions(+), 7 deletions(-)

Merge Request: origin/develop → origin/main

[coderabbitai]

Warning

Rate limit exceeded

@sergak01 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 29 minutes and 23 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 0c877cbf-19a6-4799-9d81-b575c095846b

📥 Commits

Reviewing files that changed from the base of the PR and between c213d74 and 03dd0b2.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (7)

• .github/workflows/release.yml
• CHANGELOG.md
• CLAUDE.md
• README.md
• package.json
• rules/claude/bug-report-template.md
• rules/cursor/bug-report-template.md

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch develop

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}