Switch to trusted publishing #1368
Conversation
| 'next', | ||
| 'next-major', |
There was a problem hiding this comment.
branches are currently not used and removing those patterns here simplifies the protection rules for the GH deploy environment
|
This pull request is automatically built and testable in CodeSandbox. To see build info of the built libraries, click here or the icon next to each commit SHA. Latest deployment of this branch, based on commit 4fb0eb9:
|
eps1lon
force-pushed
the
sebbie/11-12-switch_to_trusted_publishing
branch
from
5c0da41 to
1fedb70
Compare
| uses: cycjimmy/semantic-release-action@v5 | ||
| with: | ||
| semantic_version: 17 | ||
| semantic_version: 25 |
There was a problem hiding this comment.
|
|
||
| - name: 🚀 Release | ||
| uses: cycjimmy/semantic-release-action@v2 | ||
| uses: cycjimmy/semantic-release-action@v5 |
There was a problem hiding this comment.
Only breaking changes are bumping used node version from 16 to 24
eps1lon
force-pushed
the
sebbie/11-12-switch_to_trusted_publishing
branch
from
1fedb70 to
4976d92
Compare
There was a problem hiding this comment.
Pull Request Overview
This PR switches from using npm authentication tokens to npm's trusted publishing feature (OIDC-based authentication) for automated package releases. This improves security by eliminating the need to store long-lived NPM_TOKEN secrets.
Key changes:
- Added OIDC authentication support via
id-token: writepermission - Updated semantic-release action from v2 to v5 and semantic-release from version 17 to 25
- Removed
nextandnext-majorbranches from release configuration
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
eps1lon
force-pushed
the
sebbie/11-12-switch_to_trusted_publishing
branch
from
4976d92 to
4fb0eb9
Compare
| uses: actions/setup-node@v3 | ||
| with: | ||
| node-version: 18 | ||
| node-version: 24 |
There was a problem hiding this comment.
So that we get newer NPM versions. Had to do the same to fix it for my own packages: eps1lon/codemod-missing-await-act@2619b41
Followed https://docs.npmjs.com/trusted-publishers