From b198c47449fcf8e8a9bfc1744d2e5c3d7b864713 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fran=C3=A7ois=20Best?= Date: Wed, 29 Jul 2026 07:50:27 +0200 Subject: [PATCH] chore(release): use npm trusted publishing Remove legacy token authentication so npm can perform the OIDC exchange during publish. --- .changeset/brave-pans-pay.md | 2 ++ .github/workflows/release.yml | 8 +------- 2 files changed, 3 insertions(+), 7 deletions(-) create mode 100644 .changeset/brave-pans-pay.md diff --git a/.changeset/brave-pans-pay.md b/.changeset/brave-pans-pay.md new file mode 100644 index 0000000..a845151 --- /dev/null +++ b/.changeset/brave-pans-pay.md @@ -0,0 +1,2 @@ +--- +--- diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3f78481..edf7c49 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -108,16 +108,10 @@ jobs: if: github.event_name == 'push' run: node scripts/check-release-version.ts "${{ github.ref_name }}" - - name: Verify npm auth - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} - run: npm whoami - - name: Publish package env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} NPM_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.npm_tag || ((contains(github.ref_name, '-alpha') || contains(github.ref_name, '-beta') || contains(github.ref_name, '-rc')) && 'beta' || 'latest') }} - run: npm publish --tag "$NPM_TAG" --provenance + run: npm publish --tag "$NPM_TAG" create-github-release: name: Create GitHub release