marcop135 · Oct 2, 2026 · Oct 2, 2026
diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md
@@ -45,7 +45,7 @@ Add these **repository Actions secrets** in the GitHub UI (do not commit values)
 | `FTP_USERNAME_PRODUCTION` | FTPS username |
 | `FTP_PASSWORD_PRODUCTION` | FTPS password |
 | `ANTHROPIC_API_KEY` | Optional. Manual Skills eval only (`skills-eval.yml`). Not required for docs deploy or for using the published skills. |
-| `NPM_TOKEN` | Optional. Only for the manual **Publish to npm** workflow (`workflow_dispatch`). Local `npm publish` from the release tag needs no Actions secret. |
+| `NPM_TOKEN` | Optional. Only for the manual **Publish to npm** workflow (`workflow_dispatch`). Local `npm publish` from `develop` needs no Actions secret. |
 
 After secrets exist, push to `main` or run **Deploy docs** via `workflow_dispatch`.
 
@@ -54,9 +54,10 @@ After secrets exist, push to `main` or run **Deploy docs** via `workflow_dispatc
 1. On `develop`: update `CHANGELOG.md` (Keep a Changelog) and the `package.json` version.
 2. Run `npm run docs:build`. This rebuilds `dist/`, then `docs:sri` rewrites `docs/public/sri.json` and re-pins the versioned CDN + SRI snippets in `docs/getting-started.md`, `docs/theming.md` and `docs/theming/dark-mode.md`. Commit the result.
 3. Update the version strings no script patches: the self-host archive link in `docs/getting-started.md` and the `?v<major>` cache-buster in `src/docs/kitchen-sink/` (major releases only).
-4. Open the release PR `develop` into `main` and merge it. Confirm the docs deploy triggered by the push to `main`.
-5. On `main`, create an annotated tag and GitHub Release (`vX.Y.Z`). Publishing to npm is **manual**: check out the tag and run `npm publish --provenance --access public`. Optionally dispatch **Publish to npm** after `NPM_TOKEN` is set; the workflow does not run on `release: published`.
-6. Delete merged branches. Keep `develop`.
+4. Publish to npm (manual) from `develop`: `npm ci`, `npm login`, `npm publish --access public`. `prepublishOnly` rebuilds `dist/`; `--provenance` fails outside CI. The docs pin this version on jsDelivr, so it must be live before step 5. Alternatively dispatch **Publish to npm** on `develop` after `NPM_TOKEN` is set; it does not run on `release: published`.
+5. Open the release PR `develop` into `main` and merge it. Confirm the docs deploy triggered by the push to `main`.
+6. On `main`, create an annotated tag and GitHub Release (`vX.Y.Z`).
+7. Delete merged branches. Keep `develop`.
 
 ### Visual baselines (Playwright)
 

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -1,8 +1,9 @@
 name: Publish to npm
 
 # Manual only. Releases do not publish automatically: the maintainer runs
-# `npm publish --provenance --access public` from the tagged tree, or dispatches
-# this workflow after `NPM_TOKEN` is set in Actions secrets.
+# `npm publish --access public` from `develop`, or dispatches this
+# workflow after `NPM_TOKEN` is set in Actions secrets. `--provenance` needs
+# CI OIDC, so it only works here, not locally.
 on:
   workflow_dispatch:
 

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -19,6 +19,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - HTML-scene brand image generator.
 
+### Fixed
+
+- Built CSS banners, the skills index, and docs CDN + SRI snippets report 6.2.2.
+
 ## [6.2.1] - 2026-09-29
 
 ### Changed

diff --git a/CLAUDE.md b/CLAUDE.md
@@ -81,7 +81,7 @@ Repo Actions secrets required for docs deploy (same names as md2pdf FTPS):
 | `FTP_PASSWORD_PRODUCTION` | FTPS password |
 | `ANTHROPIC_API_KEY` | Optional. Only for the manual Skills eval workflow (`workflow_dispatch`). Absent → exit 0. Never a PR gate. |
 
-`NPM_TOKEN` is optional. Local `npm publish` from the release tag needs no Actions secret. The **Publish to npm** workflow is `workflow_dispatch` only (it does not run on GitHub Release publish). Dispatch it only after the secret exists. Agents must not invent or commit secret values. Consumers of `npx bullframe.css skills install` need no API key.
+`NPM_TOKEN` is optional. Local `npm publish` from `develop` needs no Actions secret. The **Publish to npm** workflow is `workflow_dispatch` only (it does not run on GitHub Release publish). Dispatch it only after the secret exists. Agents must not invent or commit secret values. Consumers of `npx bullframe.css skills install` need no API key.
 
 ## Changelog
 

diff --git a/dist/css/bullframe-classless-dark.css b/dist/css/bullframe-classless-dark.css
@@ -1,4 +1,4 @@
-/* ! Bullframe CSS v6.2.1 | MIT License | https://github.com/marcop135/bullframe.css  */
+/* ! Bullframe CSS v6.2.2 | MIT License | https://github.com/marcop135/bullframe.css  */
 
 /* Always-dark classless build. */
 

diff --git a/dist/css/bullframe-classless-dark.min.css b/dist/css/bullframe-classless-dark.min.css
diff --git a/dist/css/bullframe-classless-dark.min.css.map b/dist/css/bullframe-classless-dark.min.css.map
diff --git a/dist/css/bullframe-classless-system-default.css b/dist/css/bullframe-classless-system-default.css
@@ -1,4 +1,4 @@
-/* ! Bullframe CSS v6.2.1 | MIT License | https://github.com/marcop135/bullframe.css  */
+/* ! Bullframe CSS v6.2.2 | MIT License | https://github.com/marcop135/bullframe.css  */
 
 /* Classless + system dark via prefers-color-scheme (element styles only). */
 

diff --git a/dist/css/bullframe-classless-system-default.min.css b/dist/css/bullframe-classless-system-default.min.css
diff --git a/dist/css/bullframe-classless-system-default.min.css.map b/dist/css/bullframe-classless-system-default.min.css.map
diff --git a/dist/css/bullframe-classless.css b/dist/css/bullframe-classless.css
@@ -1,4 +1,4 @@
-/* ! Bullframe CSS v6.2.1 | MIT License | https://github.com/marcop135/bullframe.css  */
+/* ! Bullframe CSS v6.2.2 | MIT License | https://github.com/marcop135/bullframe.css  */
 
 /* Classless build: semantic element styles only (no .bf-* classes). */
 

diff --git a/dist/css/bullframe-classless.min.css b/dist/css/bullframe-classless.min.css
diff --git a/dist/css/bullframe-classless.min.css.map b/dist/css/bullframe-classless.min.css.map
diff --git a/dist/css/bullframe-dark.css b/dist/css/bullframe-dark.css
@@ -1,4 +1,4 @@
-/* ! Bullframe CSS v6.2.1 | MIT License | https://github.com/marcop135/bullframe.css  */
+/* ! Bullframe CSS v6.2.2 | MIT License | https://github.com/marcop135/bullframe.css  */
 
 /* Always-dark class-based build. */
 

diff --git a/dist/css/bullframe-dark.min.css b/dist/css/bullframe-dark.min.css
diff --git a/dist/css/bullframe-dark.min.css.map b/dist/css/bullframe-dark.min.css.map
diff --git a/dist/css/bullframe-system-default.css b/dist/css/bullframe-system-default.css
@@ -1,4 +1,4 @@
-/* ! Bullframe CSS v6.2.1 | MIT License | https://github.com/marcop135/bullframe.css  */
+/* ! Bullframe CSS v6.2.2 | MIT License | https://github.com/marcop135/bullframe.css  */
 
 /* Class-based + system dark: bullframe.css, then dark rules under prefers-color-scheme. */
 

diff --git a/dist/css/bullframe-system-default.min.css b/dist/css/bullframe-system-default.min.css
diff --git a/dist/css/bullframe-system-default.min.css.map b/dist/css/bullframe-system-default.min.css.map
diff --git a/dist/css/bullframe-utilities.css b/dist/css/bullframe-utilities.css
@@ -1,4 +1,4 @@
-/* ! Bullframe CSS v6.2.1 | MIT License | https://github.com/marcop135/bullframe.css  */
+/* ! Bullframe CSS v6.2.2 | MIT License | https://github.com/marcop135/bullframe.css  */
 
 /* Utilities-only build: tokens + .bf-* helpers (no base element styles). */
 

diff --git a/dist/css/bullframe-utilities.min.css b/dist/css/bullframe-utilities.min.css
diff --git a/dist/css/bullframe-utilities.min.css.map b/dist/css/bullframe-utilities.min.css.map
diff --git a/dist/css/bullframe.css b/dist/css/bullframe.css
@@ -1,4 +1,4 @@
-/* ! Bullframe CSS v6.2.1 | MIT License | https://github.com/marcop135/bullframe.css  */
+/* ! Bullframe CSS v6.2.2 | MIT License | https://github.com/marcop135/bullframe.css  */
 
 /* Class-based default build (light). Import map for the full framework. */
 

diff --git a/dist/css/bullframe.min.css b/dist/css/bullframe.min.css
diff --git a/dist/css/bullframe.min.css.map b/dist/css/bullframe.min.css.map
diff --git a/dist/skills/api.json b/dist/skills/api.json
@@ -1,6 +1,6 @@
 {
   "name": "bullframe.css",
-  "version": "6.2.1",
+  "version": "6.2.2",
   "docs": "https://bullframecss.marcopontili.com",
   "builds": [
     {

diff --git a/dist/skills/index.json b/dist/skills/index.json
@@ -1,6 +1,6 @@
 {
   "name": "bullframe.css",
-  "version": "6.2.1",
+  "version": "6.2.2",
   "docs": "https://bullframecss.marcopontili.com",
   "api": "api.json",
   "agentsBlock": "AGENTS.bullframe.md",

diff --git a/docs/getting-started.md b/docs/getting-started.md
@@ -68,7 +68,7 @@ Quick drop-in (latest published package entry):
 **Recommended for production:** pin an exact version, point at a published `.min.css` file, and add Subresource Integrity plus `crossorigin`. Package-root / unversioned CDN URLs are not SRI-safe.
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe.min.css" integrity="sha384-yWDof8CTMEkowmjk4t/3A/M7E1np4Oq+5jsFd0StDsQRvRDR/eOmzhfeYAZSq6eU" crossorigin="anonymous" />
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe.min.css" integrity="sha384-BhYzNPmgYBaxx3Ovu2oxCblRVNUS2uq4YWb6q8FtV6YCLZ9y/5VMRVpqz8l3TFh4" crossorigin="anonymous" />
 ```
 
 Swap the filename for another build (`bullframe-classless.min.css`, `bullframe-dark.min.css`, …). Hashes for all seven builds: [sri.json](/sri.json).
@@ -104,7 +104,7 @@ import 'bullframe.css/utilities';
 
 ## Download
 
-Self-host from the [v6.2.0 archive](https://github.com/marcop135/bullframe.css/archive/refs/tags/v6.2.0.zip). Source maps ship beside the minified CSS in `dist/css/`.
+Self-host from the [v6.2.2 archive](https://github.com/marcop135/bullframe.css/archive/refs/tags/v6.2.2.zip). Source maps ship beside the minified CSS in `dist/css/`.
 
 ## Starter HTML
 
@@ -117,7 +117,7 @@ Self-host from the [v6.2.0 archive](https://github.com/marcop135/bullframe.css/a
     <meta charset="utf-8" />
     <title>Bullframe CSS Starter</title>
     <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe.min.css" integrity="sha384-yWDof8CTMEkowmjk4t/3A/M7E1np4Oq+5jsFd0StDsQRvRDR/eOmzhfeYAZSq6eU" crossorigin="anonymous" />
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe.min.css" integrity="sha384-BhYzNPmgYBaxx3Ovu2oxCblRVNUS2uq4YWb6q8FtV6YCLZ9y/5VMRVpqz8l3TFh4" crossorigin="anonymous" />
   </head>
   <body>
     <a class="bf-skip-link" href="#main">Skip to content</a>
@@ -138,7 +138,7 @@ Self-host from the [v6.2.0 archive](https://github.com/marcop135/bullframe.css/a
     <meta charset="utf-8" />
     <title>Bullframe CSS Classless Starter</title>
     <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-classless.min.css" integrity="sha384-32vn9uOL8LKcipdEkc0z5RHGLeiRiArpkjpPTPOfGPuXEVzN1uLVLWxf9S80jJVC" crossorigin="anonymous" />
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-classless.min.css" integrity="sha384-+QwB6qpq3lV/82Ho9Gqnto/rX+wpNo7wtXBwCFRFOP8RasV/SevTJOAuNAI/egdY" crossorigin="anonymous" />
     <style>
       body {
         margin-left: auto;

diff --git a/docs/public/sri.json b/docs/public/sri.json
@@ -1,41 +1,41 @@
 {
-  "version": "6.2.1",
+  "version": "6.2.2",
   "algorithm": "sha384",
-  "generatedAt": "2026-09-29T12:13:34.434Z",
+  "generatedAt": "2026-10-02T10:09:47.378Z",
   "files": {
     "bullframe.min.css": {
-      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe.min.css",
-      "integrity": "sha384-yWDof8CTMEkowmjk4t/3A/M7E1np4Oq+5jsFd0StDsQRvRDR/eOmzhfeYAZSq6eU",
+      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe.min.css",
+      "integrity": "sha384-BhYzNPmgYBaxx3Ovu2oxCblRVNUS2uq4YWb6q8FtV6YCLZ9y/5VMRVpqz8l3TFh4",
       "crossorigin": "anonymous"
     },
     "bullframe-dark.min.css": {
-      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-dark.min.css",
-      "integrity": "sha384-rOBU+2K0jzOie/z89918PWzDd0HSmmN9w15GyJnZIOYbEylte7l9TJKtA95iyfjm",
+      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-dark.min.css",
+      "integrity": "sha384-7AtSvUjEjHp0wc6IBvtz+MfmBxglADw2GnlgPKOryTDE8YPGoxTo8rvectm5nJqd",
       "crossorigin": "anonymous"
     },
     "bullframe-system-default.min.css": {
-      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-system-default.min.css",
-      "integrity": "sha384-PRYo6KOJBNupLQILMfcQQuZ3qfxYLT0JourY4DgfrpwN3d2+CQhQc3cPG41/tpg+",
+      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-system-default.min.css",
+      "integrity": "sha384-Auun6ZESNGdPZw2s9kfQ7sppDm4QMuZUg7MJPG3cBDwT8MsGbDpaRbwei4lwpNV2",
       "crossorigin": "anonymous"
     },
     "bullframe-classless.min.css": {
-      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-classless.min.css",
-      "integrity": "sha384-32vn9uOL8LKcipdEkc0z5RHGLeiRiArpkjpPTPOfGPuXEVzN1uLVLWxf9S80jJVC",
+      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-classless.min.css",
+      "integrity": "sha384-+QwB6qpq3lV/82Ho9Gqnto/rX+wpNo7wtXBwCFRFOP8RasV/SevTJOAuNAI/egdY",
       "crossorigin": "anonymous"
     },
     "bullframe-classless-dark.min.css": {
-      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-classless-dark.min.css",
-      "integrity": "sha384-OzBHfWHCd/fWX1D63YQpFnn2DoWNAZbODaKbE4dv5WDb69cInjd/8Mx48UNfsd8G",
+      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-classless-dark.min.css",
+      "integrity": "sha384-nCZwzAsqkRZi9gT8x75oklKfFbXnbeGcNOKhttl1xQ7yyoKr0WYwUiqZ7ItNu/uE",
       "crossorigin": "anonymous"
     },
     "bullframe-classless-system-default.min.css": {
-      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-classless-system-default.min.css",
-      "integrity": "sha384-70UCYl+DX6lKKeWDAumsiyGgWyCwB6breOBTIL1j8pknVaTa+MyBhPLJDeeUya09",
+      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-classless-system-default.min.css",
+      "integrity": "sha384-nxuvBkIgdvaiU7Is9Nzo3DYqn98qCEe094C/D0tmm8jNk+Hm00WEA2MTIJ3VjQWr",
       "crossorigin": "anonymous"
     },
     "bullframe-utilities.min.css": {
-      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-utilities.min.css",
-      "integrity": "sha384-lGUEW5MFXTpQwkaVAtJWYxpDAoenOFCcW/8UhDM+ckvBfmSG45CqlKmvesgf+cSH",
+      "href": "https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-utilities.min.css",
+      "integrity": "sha384-Xfa0giNMuqAydFpRWUN98iqPNYv5PH7DL+dqg7AMClbBus396yNNEIbR/Lbsoug2",
       "crossorigin": "anonymous"
     }
   }

diff --git a/docs/theming.md b/docs/theming.md
@@ -9,7 +9,7 @@ Bullframe CSS provides multiple theme variants and easy customization options. O
 <!-- sri:cdn-light:start -->
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe.min.css" integrity="sha384-yWDof8CTMEkowmjk4t/3A/M7E1np4Oq+5jsFd0StDsQRvRDR/eOmzhfeYAZSq6eU" crossorigin="anonymous" />
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe.min.css" integrity="sha384-BhYzNPmgYBaxx3Ovu2oxCblRVNUS2uq4YWb6q8FtV6YCLZ9y/5VMRVpqz8l3TFh4" crossorigin="anonymous" />
 ```
 
 <!-- sri:cdn-light:end -->
@@ -19,7 +19,7 @@ Bullframe CSS provides multiple theme variants and easy customization options. O
 <!-- sri:cdn-dark:start -->
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-dark.min.css" integrity="sha384-rOBU+2K0jzOie/z89918PWzDd0HSmmN9w15GyJnZIOYbEylte7l9TJKtA95iyfjm" crossorigin="anonymous" />
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-dark.min.css" integrity="sha384-7AtSvUjEjHp0wc6IBvtz+MfmBxglADw2GnlgPKOryTDE8YPGoxTo8rvectm5nJqd" crossorigin="anonymous" />
 ```
 
 <!-- sri:cdn-dark:end -->
@@ -31,7 +31,7 @@ Switches between light and dark from `prefers-color-scheme`:
 <!-- sri:cdn-system:start -->
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-system-default.min.css" integrity="sha384-PRYo6KOJBNupLQILMfcQQuZ3qfxYLT0JourY4DgfrpwN3d2+CQhQc3cPG41/tpg+" crossorigin="anonymous" />
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-system-default.min.css" integrity="sha384-Auun6ZESNGdPZw2s9kfQ7sppDm4QMuZUg7MJPG3cBDwT8MsGbDpaRbwei4lwpNV2" crossorigin="anonymous" />
 ```
 
 <!-- sri:cdn-system:end -->

diff --git a/docs/theming/dark-mode.md b/docs/theming/dark-mode.md
@@ -9,7 +9,7 @@ The `bullframe-system-default.css` build automatically switches between light an
 <!-- sri:cdn-system:start -->
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-system-default.min.css" integrity="sha384-PRYo6KOJBNupLQILMfcQQuZ3qfxYLT0JourY4DgfrpwN3d2+CQhQc3cPG41/tpg+" crossorigin="anonymous" />
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-system-default.min.css" integrity="sha384-Auun6ZESNGdPZw2s9kfQ7sppDm4QMuZUg7MJPG3cBDwT8MsGbDpaRbwei4lwpNV2" crossorigin="anonymous" />
 ```
 
 <!-- sri:cdn-system:end -->
@@ -23,7 +23,7 @@ Use `bullframe-dark.css` for a permanent dark theme:
 <!-- sri:cdn-dark:start -->
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.1/dist/css/bullframe-dark.min.css" integrity="sha384-rOBU+2K0jzOie/z89918PWzDd0HSmmN9w15GyJnZIOYbEylte7l9TJKtA95iyfjm" crossorigin="anonymous" />
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bullframe.css@6.2.2/dist/css/bullframe-dark.min.css" integrity="sha384-7AtSvUjEjHp0wc6IBvtz+MfmBxglADw2GnlgPKOryTDE8YPGoxTo8rvectm5nJqd" crossorigin="anonymous" />
 ```
 
 <!-- sri:cdn-dark:end -->

diff --git a/tests/skills/__snapshots__/index.json b/tests/skills/__snapshots__/index.json
@@ -1,6 +1,6 @@
 {
   "name": "bullframe.css",
-  "version": "6.2.1",
+  "version": "6.2.2",
   "docs": "https://bullframecss.marcopontili.com",
   "api": "api.json",
   "agentsBlock": "AGENTS.bullframe.md",