ci: prepare for trusted publishing

Author: lachlancollins

.github/FUNDING.yml

@@ -1,2 +1 @@
 github: tannerlinsley
-custom: https://youtube.com/tannerlinsley

.github/workflows/autofix.yml

@@ -18,13 +18,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
       - name: Setup Tools
         uses: tanstack/config/.github/setup@main
       - name: Fix formatting
-        run: pnpm prettier:write
+        run: pnpm format
       - name: Apply fixes
         uses: autofix-ci/action@551dded8c6cc8a1054039c8bc0b8b48c51dfc6ef
         with:

.github/workflows/pr.yml

@@ -19,13 +19,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
       - name: Setup Tools
         uses: tanstack/config/.github/setup@main
       - name: Get base and head commits for `nx affected`
-        uses: nrwl/nx-set-shas@v4.3.0
+        uses: nrwl/nx-set-shas@v4.4.0
         with:
           main-branch-name: main
       - name: Install Playwright browsers
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
       - name: Setup Tools
@@ -46,3 +46,15 @@ jobs:
         run: pnpm run build:all
       - name: Publish Previews
         run: pnpx pkg-pr-new publish --pnpm --compact './packages/*' --template './examples/*/*'
+  provenance:
+    name: Provenance
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6.0.1
+        with:
+          fetch-depth: 0
+      - name: Check Provenance
+        uses: danielroe/provenance-action@v0.1.1
+        with:
+          fail-on-downgrade: true

.github/workflows/release.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
       - name: Setup Tools
@@ -41,4 +41,3 @@ jobs:
           title: 'ci: Version Packages'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

examples/svelte/dynamic/src/App.svelte

@@ -10,9 +10,9 @@
 <main>
   <p>
     These components are using <strong>dynamic</strong> sizes. This means that each
-    element's exact dimensions are unknown when rendered. An estimated dimension
-    is used as the initial measurement, then this measurement is readjusted on the
-    fly as each element is rendered.
+    element's exact dimensions are unknown when rendered. An estimated dimension is
+    used as the initial measurement, then this measurement is readjusted on the fly
+    as each element is rendered.
   </p>
   <nav>
     <ul>

nx.json

@@ -1,9 +1,12 @@
 {
   "$schema": "./node_modules/nx/schemas/nx-schema.json",
   "defaultBase": "main",
-  "nxCloudAccessToken": "ZjRlNGQyYjgtYmQ2NS00ZjNkLTgwZTktNGQ2YzEwZmRlNzQ3fHJlYWQ=",
+  "nxCloudId": "65d1330edb0c1e7def5cb068",
   "useInferencePlugins": false,
   "parallel": 5,
+  "tui": {
+    "enabled": false
+  },
   "namedInputs": {
     "sharedGlobals": [
       "{workspaceRoot}/.nvmrc",

package.json

@@ -3,7 +3,7 @@
   "private": true,
   "repository": {
     "type": "git",
-    "url": "https://github.com/TanStack/virtual.git"
+    "url": "git+https://github.com/TanStack/virtual.git"
   },
   "packageManager": "pnpm@10.24.0",
   "type": "module",
@@ -13,7 +13,6 @@
     "test:pr": "nx affected --targets=test:sherif,test:knip,test:docs,test:eslint,test:lib,test:e2e,test:types,test:build,build",
     "test:ci": "nx run-many --targets=test:sherif,test:knip,test:docs,test:eslint,test:lib,test:e2e,test:types,test:build,build",
     "test:eslint": "nx affected --target=test:eslint",
-    "test:format": "pnpm run prettier --check",
     "test:sherif": "sherif",
     "test:lib": "nx affected --target=test:lib --exclude=examples/**",
     "test:lib:dev": "pnpm run test:lib && nx watch --all -- pnpm run test:lib",
@@ -26,10 +25,9 @@
     "build:all": "nx run-many --target=build --exclude=examples/**",
     "watch": "pnpm run build:all && nx watch --all -- pnpm run build:all",
     "dev": "pnpm run watch",
-    "prettier": "prettier --ignore-unknown '**/*'",
-    "prettier:write": "pnpm run prettier --write",
+    "format": "prettier --experimental-cli --ignore-unknown '**/*' --write",
     "changeset": "changeset",
-    "changeset:version": "changeset version && pnpm install --no-frozen-lockfile && pnpm prettier:write",
+    "changeset:version": "changeset version && pnpm install --no-frozen-lockfile && pnpm format",
     "changeset:publish": "changeset publish"
   },
   "nx": {
@@ -50,9 +48,9 @@
     "jsdom": "^27.0.0",
     "knip": "^5.63.1",
     "markdown-link-extractor": "^4.0.2",
-    "nx": "^21.5.3",
+    "nx": "22.1.3",
     "premove": "^4.0.0",
-    "prettier": "^3.6.2",
+    "prettier": "^3.7.4",
     "prettier-plugin-svelte": "^3.4.0",
     "publint": "^0.3.13",
     "sherif": "^1.6.1",

packages/angular-virtual/package.json

@@ -6,7 +6,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/TanStack/virtual.git",
+    "url": "git+https://github.com/TanStack/virtual.git",
     "directory": "packages/angular-virtual"
   },
   "homepage": "https://tanstack.com/virtual",

packages/lit-virtual/package.json

@@ -6,7 +6,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/TanStack/virtual.git",
+    "url": "git+https://github.com/TanStack/virtual.git",
     "directory": "packages/lit-virtual"
   },
   "homepage": "https://tanstack.com/virtual",

packages/lit-virtual/src/index.ts

@@ -13,8 +13,7 @@ import type { PartialKeys, VirtualizerOptions } from '@tanstack/virtual-core'
 class VirtualizerControllerBase<
   TScrollElement extends Element | Window,
   TItemElement extends Element,
-> implements ReactiveController
-{
+> implements ReactiveController {
   host: ReactiveControllerHost
 
   private readonly virtualizer: Virtualizer<TScrollElement, TItemElement>