From 3eb197d9b83f911b671e80fd9277cef236b4b391 Mon Sep 17 00:00:00 2001
From: Rafael Garcia <raf@kernel.sh>
Date: Sat, 7 Feb 2026 14:50:16 -0500
Subject: [PATCH] fix: correct npm repository URL for OIDC provenance
 validation

The npm OIDC provenance check requires repository.url in package.json
to match the actual GitHub repo URL. Was "https://github.com/kernel",
needs to be "https://github.com/kernel/cli".

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .goreleaser.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 41e0385..4efb7dc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -40,7 +40,7 @@ brews:
 
 npms:
   - name: "@onkernel/cli"
-    repository: "https://github.com/kernel"
+    repository: "https://github.com/kernel/cli"
     bugs: https://github.com/kernel/cli/issues
     description: Kernel CLI
     homepage: https://www.kernel.sh/docs