build: version the forked packages 14.0.3-quantus.1, not upstream's 14.0.3

Publishing under upstream's exact version was not merely confusing in a lockfile
— it was unsafe.

@polkadot/util-crypto pins @polkadot/networks at an exact version, and
@polkadot/keyring pins util-crypto the same way. With every fork numbered
14.0.3, a consumer that forgot one resolution would have yarn quietly satisfy
that pin from npm: the *unforked* upstream package, installing cleanly, with no
Quantus network entry or no isDilithium, and nothing to indicate anything was
wrong until something failed much later for an unrelated-looking reason.

Renaming the forks makes that a resolution failure instead. Verified by deleting
the @polkadot/networks resolution in quantus/ui and running an install:

  YN0082: @polkadot/networks@npm:14.0.3-quantus.1: No candidates found

Unforked dependencies keep upstream's numbers — @polkadot/util, x-bigint,
x-randomvalues, wasm-* — because they come from npm and should.

Published with `--tag quantus`, which npm requires for a prerelease version and
which is the honest dist-tag anyway: these are not upstream's `latest`. The tag
is informational, since consumers pin by tarball URL. The old 14.0.3 artifacts
have been deleted from the registry so nothing can resolve to them.

Refs quantus/extension#2

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012uDUodEcRbBwNRi3UCmw8f
This commit is contained in:
rob thijssen
2026-09-15 11:27:59 +03:00
parent b39241c840
commit 49f3442e5c
6 changed files with 8 additions and 8 deletions

View File

@@ -18,11 +18,11 @@
"./packageDetect.cjs"
],
"type": "module",
"version": "14.0.3",
"version": "14.0.3-quantus.1",
"main": "index.js",
"dependencies": {
"@polkadot/util": "14.0.3",
"@polkadot/util-crypto": "14.0.3",
"@polkadot/util-crypto": "14.0.3-quantus.1",
"@quantus/crypto": "^0.1.0",
"tslib": "^2.8.0"
},

View File

@@ -3,4 +3,4 @@
// Do not edit, auto-generated by @polkadot/dev
export const packageInfo = { name: '@polkadot/keyring', path: 'auto', type: 'auto', version: '14.0.3' };
export const packageInfo = { name: '@polkadot/keyring', path: 'auto', type: 'auto', version: '14.0.3-quantus.1' };

View File

@@ -15,7 +15,7 @@
},
"sideEffects": false,
"type": "module",
"version": "14.0.3",
"version": "14.0.3-quantus.1",
"main": "index.js",
"dependencies": {
"@polkadot/util": "14.0.3",

View File

@@ -3,4 +3,4 @@
// Do not edit, auto-generated by @polkadot/dev
export const packageInfo = { name: '@polkadot/networks', path: 'auto', type: 'auto', version: '14.0.3' };
export const packageInfo = { name: '@polkadot/networks', path: 'auto', type: 'auto', version: '14.0.3-quantus.1' };

View File

@@ -20,7 +20,7 @@
"./packageDetect.cjs"
],
"type": "module",
"version": "14.0.3",
"version": "14.0.3-quantus.1",
"browser": {
"crypto": false,
"stream": false
@@ -29,7 +29,7 @@
"dependencies": {
"@noble/curves": "^1.3.0",
"@noble/hashes": "^1.3.3",
"@polkadot/networks": "14.0.3",
"@polkadot/networks": "14.0.3-quantus.1",
"@polkadot/util": "14.0.3",
"@polkadot/wasm-crypto": "^7.5.3",
"@polkadot/wasm-util": "^7.5.3",

View File

@@ -3,4 +3,4 @@
// Do not edit, auto-generated by @polkadot/dev
export const packageInfo = { name: '@polkadot/util-crypto', path: 'auto', type: 'auto', version: '14.0.3' };
export const packageInfo = { name: '@polkadot/util-crypto', path: 'auto', type: 'auto', version: '14.0.3-quantus.1' };