publish fix

Author: 0xNe0x1

.github/workflows/publish-evm.yml

@@ -4,25 +4,39 @@ on:
   release:
     types: [created]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      # Setup .npmrc file to publish to npm
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v3
+      
+      - uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
 
       - run: mv package.evm.json package.json
 
-      - run: yarn install
-
       - name: get-npm-version
         id: package-version
         uses: martinbeentjes/npm-get-version-action@master
+
+      - name: Remove token auth (force OIDC)
+        run: |
+          rm -f .npmrc ~/.npmrc || true
+          npm config delete "//registry.npmjs.org/:_authToken" || true
       
-      - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTOMATION_TOKEN }}
+      - run: npm publish --ignore-scripts --access public
+
+      - name: Upload npm logs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: npm-logs
+          path: /home/runner/.npm/_logs/
+          if-no-files-found: warn
+          retention-days: 14

.github/workflows/publish-svm.yml

@@ -4,25 +4,39 @@ on:
   release:
     types: [created]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      # Setup .npmrc file to publish to npm
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v3
+
+      - uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
 
       - run: mv package.svm.json package.json
 
-      - run: yarn install
-
       - name: get-npm-version
         id: package-version
         uses: martinbeentjes/npm-get-version-action@master
+
+      - name: Remove token auth (force OIDC)
+        run: |
+          rm -f .npmrc ~/.npmrc || true
+          npm config delete "//registry.npmjs.org/:_authToken" || true
       
-      - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTOMATION_TOKEN }}
+      - run: npm publish --ignore-scripts --access public
+
+      - name: Upload npm logs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: npm-logs
+          path: /home/runner/.npm/_logs/
+          if-no-files-found: warn
+          retention-days: 14

.github/workflows/publish.yml

@@ -4,23 +4,33 @@ on:
   release:
     types: [created]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      # Setup .npmrc file to publish to npm
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v3
+
+      - uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
-      
-      - run: yarn install
 
-      - name: get-npm-version
-        id: package-version
-        uses: martinbeentjes/npm-get-version-action@master
-      
-      - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTOMATION_TOKEN }}
+      - name: Remove token auth (force OIDC)
+        run: |
+          rm -f .npmrc ~/.npmrc || true
+          npm config delete "//registry.npmjs.org/:_authToken" || true
+
+      - run: npm publish --ignore-scripts --access public
+
+      - name: Upload npm logs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: npm-logs
+          path: /home/runner/.npm/_logs/
+          if-no-files-found: warn
+          retention-days: 14