From 18eb02398d64849ab0a6193129fdf068c02b2e26 Mon Sep 17 00:00:00 2001
From: Fede Barcelona <fede_rico_94@hotmail.com>
Date: Fri, 25 Sep 2026 09:37:52 +0200
Subject: [PATCH] fix(release): add repository field required by npm provenance

Trusted publishing signs a provenance statement, and npm rejects it (E422)
unless package.json repository.url matches the source repo. Bumps to 1.5.3
since 1.5.2 never reached npm and the workflow only runs on version changes.
---
 package.json | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/package.json b/package.json
index ada5bf5..4959bb5 100644
--- a/package.json
+++ b/package.json
@@ -1,9 +1,13 @@
 {
   "name": "@sysdig/backstage-plugin-sysdig",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "main": "dist/index.esm.js",
   "types": "dist/index.d.ts",
   "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/sysdiglabs/backstage-plugin-sysdig"
+  },
   "publishConfig": {
     "access": "public",
     "main": "dist/index.esm.js",