Merge pull request #159 from opf/code-maintenance/69756-npm-trusted-publishing

[#69756] Migrate to npm trusted publishing/OIDC

Author: HDinger

.github/actions/build_angular/entrypoint.sh

@@ -2,8 +2,6 @@
 
 set -e
 
-printf "//registry.npmjs.org/:_authToken=%s" "$NPM_AUTH_TOKEN_SHARED" > "$HOME/.npmrc"
-
 PACKAGE_VERSION=$(jq '.version' --raw-output ./package.json)
 
 echo "************* Building v$PACKAGE_VERSION *************"

.github/actions/build_node/entrypoint.sh

@@ -2,8 +2,6 @@
 
 set -e
 
-printf "//registry.npmjs.org/:_authToken=%s" "$NPM_AUTH_TOKEN_SHARED" > "$HOME/.npmrc"
-
 PACKAGE_VERSION=$(jq '.version' --raw-output ./package.json)
 
 echo "************* Building v$PACKAGE_VERSION *************"

.github/workflows/publish.yml

@@ -59,8 +59,6 @@ jobs:
           name: octicons_gem
           path: ./lib/octicons_helper/vendor/cache
       - uses: ./.github/actions/build_ruby
-        env:
-          RUBYGEMS_TOKEN: ${{ secrets.RUBYGEMS_TOKEN }}
         with:
           args: octicons_helper
 #  node:
@@ -73,8 +71,6 @@ jobs:
 #          name: octicons
 #          path: ./lib/build
 #      - uses: ./.github/actions/build_node
-#        env:
-#          NPM_AUTH_TOKEN_SHARED: ${{ secrets.NPM_AUTH_TOKEN_SHARED }}
 #        with:
 #          args: octicons_node
   angular:
@@ -88,7 +84,5 @@ jobs:
           path: ./lib/build
       - name: Build @openproject/octicons-angular
         uses: ./.github/actions/build_angular
-        env:
-          NPM_AUTH_TOKEN_SHARED: ${{ secrets.NPM_AUTH_TOKEN_SHARED }}
         with:
           args: octicons_angular

.github/workflows/release.yml

@@ -43,5 +43,4 @@ jobs:
           version: yarn changeset:version
           publish: script/changeset-publish
         env:
-          GITHUB_TOKEN: ${{ secrets.GPR_AUTH_TOKEN_SHARED }}
-          NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN_SHARED }}
+          GITHUB_TOKEN: ${{ steps.get-access-token.outputs.access-token }}