Skip to content

chore: removing npm token refs and adding trusted publishing config#3420

Closed
michaelmalave wants to merge 5 commits into
mainfrom
mm/chore/enable-trusted-publishing
Closed

chore: removing npm token refs and adding trusted publishing config#3420
michaelmalave wants to merge 5 commits into
mainfrom
mm/chore/enable-trusted-publishing

Conversation

@michaelmalave

@michaelmalave michaelmalave commented Nov 25, 2025

Copy link
Copy Markdown
Contributor

Description:

This converts CLI publishing from using tokens which will be deprecated to trusted publishing.

Testing/Validation:

ensure this line is included in the publishing job file to ensure required permissions.

permissions:
  id-token: write
  contents: read

Limitation: Due to Github's configuration, workflows run are those on main. It is recommended to attempt a beta publish after merged to main.

Details:

NPM Trusted Publishing docs
Lerna: 9.0.0 is required for OIDC support for trusted publishing: lerna docs
Workspace discovery now happens automatically using the package.json in the workspaces block.

NPM Trusted Publishing Configuration:
image

Related

W-20312941

@michaelmalave michaelmalave requested a review from a team as a code owner November 25, 2025 22:48
@git2gus

git2gus Bot commented Nov 25, 2025

Copy link
Copy Markdown

Git2Gus App is installed but the .git2gus/config.json doesn't exist.

@michaelmalave michaelmalave deleted the mm/chore/enable-trusted-publishing branch December 9, 2025 23:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant