From 6ff4bdfc3fbdbfa94a20fbbf26fd5591b0335e1d Mon Sep 17 00:00:00 2001
From: Corey Martin <coreyn.martin@gmail.com>
Date: Tue, 10 Feb 2026 12:23:22 -0800
Subject: [PATCH 1/2] upgrade to node 24 to enable trusted publishing

---
 .github/workflows/create-release-pr.yaml |  2 +-
 .github/workflows/docs.yaml              |  2 +-
 .github/workflows/test-release-sync.yaml | 12 ++++++------
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/create-release-pr.yaml b/.github/workflows/create-release-pr.yaml
index f48427a5f..cbe9cb623 100644
--- a/.github/workflows/create-release-pr.yaml
+++ b/.github/workflows/create-release-pr.yaml
@@ -26,7 +26,7 @@ jobs:
         run: "git branch --track main origin/main"
 
       - name: Setup node
-        uses: "actions/setup-node@v3"
+        uses: "actions/setup-node@v4"
         env:
           SKIP_YARN_COREPACK_CHECK: true
         with:
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 3e51d337c..e0b4b32fc 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -15,7 +15,7 @@ jobs:
       - name: "Checkout"
         uses: "actions/checkout@v3"
       - name: "Setup Node"
-        uses: "actions/setup-node@v3"
+        uses: "actions/setup-node@v4"
         env:
           SKIP_YARN_COREPACK_CHECK: true
         with:
diff --git a/.github/workflows/test-release-sync.yaml b/.github/workflows/test-release-sync.yaml
index b13519638..60def6d61 100644
--- a/.github/workflows/test-release-sync.yaml
+++ b/.github/workflows/test-release-sync.yaml
@@ -31,7 +31,7 @@ jobs:
           fetch-depth: 2
 
       - name: "Setup Node"
-        uses: "actions/setup-node@v3"
+        uses: "actions/setup-node@v4"
         env:
           SKIP_YARN_COREPACK_CHECK: true
         with:
@@ -77,7 +77,7 @@ jobs:
           ref: ${{ needs.update-lock-file.outputs.VERIFIED_LOCK_COMMIT }}
 
       - name: "Setup Node v${{ matrix.node-version }}"
-        uses: "actions/setup-node@v3"
+        uses: "actions/setup-node@v4"
         env:
           SKIP_YARN_COREPACK_CHECK: true
         with:
@@ -129,7 +129,7 @@ jobs:
           ref: ${{ needs.update-lock-file.outputs.VERIFIED_LOCK_COMMIT }}
 
       - name: "Setup Node v${{ matrix.node-version }}"
-        uses: "actions/setup-node@v3"
+        uses: "actions/setup-node@v4"
         env:
           SKIP_YARN_COREPACK_CHECK: true
         with:
@@ -166,11 +166,12 @@ jobs:
         uses: actions/checkout@v3
 
       - name: "Setup Node"
-        uses: "actions/setup-node@v3"
+        uses: "actions/setup-node@v4"
         env:
           SKIP_YARN_COREPACK_CHECK: true
         with:
-          node-version-file: ".nvmrc"
+          node-version: "24"
+          registry-url: "https://registry.npmjs.org"
 
       - name: Install dependencies with yarn cache
         uses: ./.github/actions/yarn-nm-install
@@ -185,7 +186,6 @@ jobs:
           publish: yarn release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       # If the Version Packages PR has been created in the changesets step we should check if our workspace
       # package.json files have been updated from dependency bumps and update the lock file if so:

From 4c79ca770b453bf26cdf74b51ebdb6ebbea8a0ba Mon Sep 17 00:00:00 2001
From: Corey Martin <coreyn.martin@gmail.com>
Date: Tue, 10 Feb 2026 12:25:52 -0800
Subject: [PATCH 2/2] wip

---
 .github/workflows/test-release-sync.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/test-release-sync.yaml b/.github/workflows/test-release-sync.yaml
index 60def6d61..fc83b45dd 100644
--- a/.github/workflows/test-release-sync.yaml
+++ b/.github/workflows/test-release-sync.yaml
@@ -170,6 +170,7 @@ jobs:
         env:
           SKIP_YARN_COREPACK_CHECK: true
         with:
+          # npm trusted publishing requires node >=22.14.0
           node-version: "24"
           registry-url: "https://registry.npmjs.org"