Skip to content

Conversation

@jakubno
Copy link
Member

@jakubno jakubno commented Oct 30, 2025

Note

Updates the release workflow to Node.js 22 and switches npm publishing to OIDC by granting id-token and removing the NPM_TOKEN secret.

  • CI/CD: Release workflow (.github/workflows/release.yml)
    • Node.js / Actions:
      • Upgrade actions/setup-node to v6 and Node version to 22.x across jobs.
      • Set registry-url where missing; keep pnpm caching.
    • Authentication:
      • Grant permissions: id-token: write.
      • Set NPM_TOKEN to an empty string to enable OIDC-based npm publish via Changesets.
    • Tooling:
      • Add step to update npm to ^11.6 during release job.
    • Misc:
      • Minor step renames/ordering; no functional changes to job matrix or release logic.

Written by Cursor Bugbot for commit 124ce8e. This will update automatically on new commits. Configure here.

@jakubno jakubno added the improvement Improvement for current functionality label Oct 30, 2025
@linear
Copy link

linear bot commented Oct 30, 2025

@jakubno jakubno merged commit 273f9db into main Oct 30, 2025
9 checks passed
@jakubno jakubno deleted the use-oidc-for-npm-publish-eng-3226 branch October 30, 2025 12:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

improvement Improvement for current functionality

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants