fix: default NODE_AUTH_TOKEN to empty so install works without it

Reviewed-on: #3

.gitea/workflows/ci.yml

@@ -39,7 +39,7 @@ jobs:
     needs: verify
     runs-on: ubuntu-latest
     container:
-      image: mcr.microsoft.com/playwright:v1.59.0-jammy
+      image: mcr.microsoft.com/playwright:v1.61.1-jammy
     steps:
       - uses: actions/checkout@v4
       - name: Enable Corepack
@@ -57,6 +57,7 @@ jobs:
       - name: E2E (chromium + firefox)
         timeout-minutes: 15
         run: yarn test:e2e
+        
 
   publish:
     needs: [verify, e2e]
@@ -66,19 +67,33 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with: { node-version: '25' }
+      
+      - name: Check token is present
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.CAROUSEL_PACKAGE }}
+        run: |
+          if [ -z "$NODE_AUTH_TOKEN" ]; then
+            echo "NODE_AUTH_TOKEN is EMPTY — secret not injected"
+            exit 1
+          fi
+          echo "NODE_AUTH_TOKEN length: ${#NODE_AUTH_TOKEN}"
+
       - name: Enable Corepack
         run: |
           corepack enable
           corepack prepare yarn@4.11.0 --activate
       - run: yarn install --immutable
+
       - name: Assert tag matches package.json version
         run: |
           TAG="${GITHUB_REF_NAME#v}"
           PKG="$(node -p "require('./package.json').version")"
           test "$TAG" = "$PKG" || { echo "tag v$TAG != package.json $PKG"; exit 1; }
+          
       - name: Build
         run: yarn build
+        
       - name: Publish to Gitea registry
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.CI_DEPLOY_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.CAROUSEL_PACKAGE }}
-        run: npm publish
+        run: yarn npm publish

.gitignore

@@ -13,3 +13,4 @@ logs_llm/
 
 *.md
 !README.md
+!CHANGELOG.md

.yarnrc.yml

@@ -1 +1,7 @@
 nodeLinker: node-modules
+
+npmScopes:
+  ilia:
+    npmPublishRegistry: "https://git.allmy.work/api/packages/ilia/npm/"
+    npmAlwaysAuth: true
+    npmAuthToken: "${NODE_AUTH_TOKEN:-}"

CHANGELOG.md

@@ -0,0 +1,10 @@
+# Changelog
+
+Entries are derived from [Conventional Commits](https://www.conventionalcommits.org)
+at each `v*` release tag.
+
+## [Unreleased]
+
+## [0.1.0] - 2026-07-01
+
+- Initial core (`createCarousel`), `dots()` fallback, `autoplay()`, and `carousel.css`.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ilia/carousel",
-  "version": "0.0.0",
+  "version": "0.1.0",
   "type": "module",
   "sideEffects": [
     "*.css"
@@ -31,7 +31,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^2",
-    "@playwright/test": "^1",
+    "@playwright/test": "1.61.1",
     "@size-limit/preset-small-lib": "^11",
     "@vitest/coverage-v8": "^2",
     "jsdom": "^25",

yarn.lock

@@ -737,7 +737,7 @@ __metadata:
   resolution: "@ilia/carousel@workspace:."
   dependencies:
     "@biomejs/biome": "npm:^2"
-    "@playwright/test": "npm:^1"
+    "@playwright/test": "npm:1.61.1"
     "@size-limit/preset-small-lib": "npm:^11"
     "@vitest/coverage-v8": "npm:^2"
     jsdom: "npm:^25"
@@ -820,7 +820,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@playwright/test@npm:^1":
+"@playwright/test@npm:1.61.1":
   version: 1.61.1
   resolution: "@playwright/test@npm:1.61.1"
   dependencies: