Skip to content

fix: Add permissions for id-token needed for npm publish #271

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
phoebus-84 wants to merge 6 commits into
base: master
Choose a base branch
from
Open

fix: Add permissions for id-token needed for npm publish #271

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
bef8a4a
fix: Add permissions for id-token needed for npm publish
phoebus-84 Dec 16, 2025
05cc3c9
fix: github action with new mpmjs auth policy
phoebus-84 Dec 16, 2025
797e8a5
fix: node 18 rip
phoebus-84 Dec 16, 2025
9cf8a2f
fix: action supercharge/redis-github-action to latest
phoebus-84 Dec 16, 2025
ef2b2b6
fix: add glob typesduring build job
phoebus-84 Dec 16, 2025
19d5c0a
fix: remove glob
phoebus-84 Dec 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 11 additions & 10 deletions .github/workflows/node.js.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,17 +19,17 @@ jobs:
strategy:
max-parallel: 1
matrix:
node-version: [18, 20]
node-version: [20]

steps:
- uses: actions/checkout@v4
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v4
with:
node-version: ${{ matrix.node-version }}
- uses: supercharge/redis-github-action@1.4.0
- uses: supercharge/redis-github-action@1.8.1
with:
redis-version: 6
redis-version: 7
- name: Install & Setup InfluxDB
run: |
cd /tmp
Expand All @@ -51,6 +51,7 @@ jobs:
--force
influx write --bucket dyne --file test/fixtures/influxdb_data.lp
- run: yarn
- run: rm -rf node_modules/@types/glob || true
- run: yarn build
- run: yarn test
- uses: codecov/codecov-action@v3
Expand All @@ -61,6 +62,9 @@ jobs:
runs-on: ubuntu-latest
if: github.ref == 'refs/heads/master'
needs: build
permissions:
contents: write
id-token: write
steps:
- uses: actions/checkout@v4
with:
Expand All @@ -75,12 +79,9 @@ jobs:
- run: yarn build
- run: git update-index --assume-unchanged package.json
- name: Install lerna globally
run: npm install --global --loglevel=error lerna@6.6.1
run: npm install --global --loglevel=error lerna@latest
- name: Authenticate with Registry and publish
run: |
yarn logout
echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" > .npmrc
npm whoami
lerna publish --no-verify-access -c -y --pre-dist-tag next --preid $(git rev-parse --short HEAD) --force-publish=*
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
# No manual .npmrc creation or 'npm whoami' needed.
# Lerna v9+ automatically detects the OIDC environment.
lerna publish --no-verify-access -c -y --pre-dist-tag next --preid $(git rev-parse --short HEAD) --force-publish=*
Loading