fix: add shrinkwrap lockfile @W-19291869@ (#188)

* fix: add shrinkwrap lockfile

* chore(release): 0.19.2-dev.0 [skip ci]

* chore: use gha runner tempdir

* chore(release): 0.19.2-dev.1 [skip ci]

* chore: remove git markers, add comment

[skip ci]

* chore(release): 0.23.5-dev.0 [skip ci]

* chore: fix workflow

[skip ci]

* chore(release): 0.23.5-dev.1 [skip ci]

* chore: typo

[skip ci]

---------

Co-authored-by: svc-cli-bot <Svc_cli_bot@salesforce.com>
Co-authored-by: Willhoit <iowillhoit@users.noreply.github.com>

Author: 3 people

.github/workflows/publish-mcp-server.yml

@@ -198,6 +198,17 @@ jobs:
         if: ${{ steps.changelog.outputs.skipped == 'false' && steps.release.outputs.id != '' }}
         run: |
           cd packages/mcp
+          rm -rf node_modules
+
+          # `npm shrinkwrap` doesn't support monorepos so we
+          # copy `packages/mcp` to a tmp dir for it to be a single npm project
+          mkdir ${{ runner.temp }}/mcp-shrinkwrap
+          # Use -L flag to dereference symlinks (e.g., README.md -> ../../README.md)
+          cp -rL . ${{ runner.temp }}/mcp-shrinkwrap
+          cd ${{ runner.temp }}/mcp-shrinkwrap
+          npm install
+          npm shrinkwrap
+
           echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ~/.npmrc
 
           # Determine npm dist-tag

packages/mcp/.sfdevrc

@@ -1,4 +1,7 @@
 {
+  "scripts": {
+    "prepack": "echo 'no prepack script'"
+  },
   "devDepOverrides": [
     "eslint-config-salesforce-license",
     "@types/node"

packages/mcp/CHANGELOG.md

@@ -1,3 +1,26 @@
+## [0.23.5-dev.1](https://github.com/salesforcecli/mcp/compare/0.23.5-dev.0...0.23.5-dev.1) (2025-10-24)
+
+
+
+## [0.23.5-dev.0](https://github.com/salesforcecli/mcp/compare/0.23.4...0.23.5-dev.0) (2025-10-24)
+
+
+### Bug Fixes
+
+* listen on `SIGTERM` for telemetry ([#296](https://github.com/salesforcecli/mcp/issues/296)) ([2115e37](https://github.com/salesforcecli/mcp/commit/2115e3733f7bb8cbfc997635bbe7b807333d931b))
+* **telemetry:** always set `isError` for tool events ([#308](https://github.com/salesforcecli/mcp/issues/308)) ([a7f9568](https://github.com/salesforcecli/mcp/commit/a7f95689d650d30900b920b5ee609b3af488b0e1))
+
+
+
+## [0.19.2-dev.1](https://github.com/salesforcecli/mcp/compare/0.19.1...0.19.2-dev.1) (2025-09-05)
+
+
+### Bug Fixes
+
+* add shrinkwrap lockfile ([400fe7a](https://github.com/salesforcecli/mcp/commit/400fe7a1852956aa8d25f5f299334f67acb36ea6))
+
+
+
 ## [0.23.4](https://github.com/salesforcecli/mcp/compare/0.23.3...0.23.4) (2025-10-06)
 
 
@@ -108,7 +131,16 @@
 
 
 
-## [0.19.2](https://github.com/salesforcecli/mcp/compare/0.19.1...0.19.2) (2025-09-16)
+## [0.19.2](https://github.com/salesforcecli/mcp/compare/0.19.2-dev.1...0.19.2) (2025-09-16)
+
+
+
+## [0.19.2-dev.1](https://github.com/salesforcecli/mcp/compare/0.19.1...0.19.2-dev.1) (2025-09-05)
+
+
+### Bug Fixes
+
+* add shrinkwrap lockfile ([400fe7a](https://github.com/salesforcecli/mcp/commit/400fe7a1852956aa8d25f5f299334f67acb36ea6))
 
 
 

packages/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/mcp",
-  "version": "0.23.4",
+  "version": "0.23.5-dev.1",
   "description": "MCP Server for interacting with Salesforce instances",
   "bin": {
     "sf-mcp-server": "bin/run.js"
@@ -31,6 +31,7 @@
     "!lib/**/*.map",
     "messages",
     "LICENSE.txt",
+    "npm-shrinkwrap.json",
     "package.json"
   ],
   "engines": {