Skip to content

Commit fbe5876

Browse files
committed
ci: use npm trusted publishing
1 parent cba2503 commit fbe5876

1 file changed

Lines changed: 13 additions & 10 deletions

File tree

.github/workflows/release-package.yml

Lines changed: 13 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -22,17 +22,20 @@ jobs:
2222
with:
2323
ref: ${{ github.event.inputs.branch || 'main' }}
2424

25-
# Setup Node.js with npm registry
26-
- uses: actions/setup-node@v4
25+
- name: Setup Node.js for npm
26+
uses: actions/setup-node@v4
2727
with:
28-
node-version: '20.x'
28+
node-version: '22.14.0'
2929
registry-url: 'https://registry.npmjs.org'
3030

31-
- run: npm install
32-
- run: npm run build-all
31+
- name: Install dependencies
32+
run: npm install
33+
34+
- name: Build package
35+
run: npm run build-all
3336

34-
# Publish with provenance using token (temporary until npm fixes OIDC)
35-
- run: npm publish --provenance --access public
36-
env:
37-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
38-
37+
- name: Use npm 11 for trusted publishing
38+
run: npm install -g npm@11.15.0
39+
40+
- name: Publish package
41+
run: npm publish --access public

0 commit comments

Comments
 (0)