Packages are published to npm as @will-cppa/pinecone-read-only-mcp.
- Merge changes to
mainwith an updatedCHANGELOG.md. - Create a GitHub Release (publish event) with a version tag aligned with semver. When the release includes breaking changes, use the body from templates/breaking-change-release-notes.md and follow deprecation-policy.md.
- The Publish workflow runs the full CI suite (
workflow_calltoci.yml), then executesnpm publish --provenance --access publicon Ubuntu withNODE_AUTH_TOKEN.
NPM_TOKENsecret configured on the repository.prepublishOnlyrunsnpm run ci— localnpm publishmust pass the same gates.
SERVER_VERSION is read from package.json at runtime so MCP serverInfo matches the published package.
After a release is on npm, record artifact and CI alignment in release-verification.md (see 0.5.0 sign-off for v0.5.0).