From 7af86b14afc016285295495c7b05172846bfd3a6 Mon Sep 17 00:00:00 2001 From: Ben Pryhoda Date: Thu, 23 Oct 2025 11:05:53 -0600 Subject: [PATCH] Update publish-npm.yml Update to use trusted publishing for npm packages. --- .github/workflows/publish-npm.yml | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml index 5ff1ca9..8bcb35c 100644 --- a/.github/workflows/publish-npm.yml +++ b/.github/workflows/publish-npm.yml @@ -4,12 +4,16 @@ on: release: types: [created] +permissions: + id-token: write # Required for OIDC + contents: read + jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: actions/setup-node@v3 + - uses: actions/checkout@v4 + - uses: actions/setup-node@v4 with: node-version: 21 - run: npm install --package-lock=false @@ -19,12 +23,13 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: actions/setup-node@v3 + - uses: actions/checkout@v4 + - uses: actions/setup-node@v4 with: node-version: 21 registry-url: https://registry.npmjs.org/ + - name: Update npm + run: npm install -g npm@latest - run: npm install --package-lock=false - run: npm publish - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} +