update: workflow npm commands updated and publish configured for OIDC

Author: adil.rakhaliyev

.github/workflows/deploy-to-artifacts.yml

@@ -37,7 +37,7 @@ jobs:
         with:
           ref: ${{steps.prep.outputs.sha}}
       - run: |
-          npm i
+          npm ci
           npx gulp build
           npm pack
       - id: package-name

.github/workflows/license-check.yml

@@ -26,7 +26,7 @@ jobs:
                   node-version: latest
 
             - name: Install dependencies
-              run: npm install
+              run: npm ci
 
             - name: Run Gulp build
               run: npx gulp build
@@ -35,4 +35,4 @@ jobs:
               run: npm pack
 
             - name: Install the application and check licenses
-              run: mkdir temp && cd temp && npm init -y && npm install ../*.tgz && npx gulp check-licenses
+              run: mkdir temp && cd temp && npm init -y && npm ci ../*.tgz && npx gulp check-licenses

.github/workflows/publish.yml

@@ -4,43 +4,43 @@ on:
   release:
     types: [published]
 
+permissions:
+  id-token: write  # Required for OIDC (Trusted Publishing)
+  contents: read
+
 jobs:
   npm-publish:
     if: ${{ !github.event.release.draft }}
     runs-on: ubuntu-latest
-    environment: release
+    environment: npmjs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.release.target_commitish }}
       - run: git fetch --force --tags
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 24
           registry-url: 'https://registry.npmjs.org'
-      - run: npm install
+      - run: npm ci
       - run: npm run publish-please-only
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
   docker-publish:
     needs: npm-publish
     runs-on: ubuntu-latest
     environment: release
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.release.target_commitish }}
       - run: git fetch --force --tags
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 24
           registry-url: 'https://registry.npmjs.org'
       - uses: docker/login-action@v1
         with:
             username: ${{ secrets.DOCKERHUB_USERNAME }}
             password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - run: npm install
+      - run: npm ci
       - run: npx gulp build
       - run: gulp docker-publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/test-dependencies.yml

@@ -15,5 +15,5 @@ jobs:
     steps:
     - uses: actions/checkout@v3
     - uses: actions/setup-node@v3
-    - run: npm i --package-lock-only
+    - run: npm ci --package-lock-only
     - run: npm audit --production

.github/workflows/test-functional.yml

@@ -131,7 +131,7 @@ jobs:
             ${{ runner.os }}-node-
       - run: npm ci
         if: ${{ !inputs.is-docker }}
-      - run: npm install
+      - run: npm ci
         if: ${{ inputs.is-docker }}
 
       - name: Add permissions on MacOS

.github/workflows/test-server.yml

@@ -56,7 +56,7 @@ jobs:
             ${{ runner.os }}-node-
       - run: npm ci
         if: ${{ !inputs.is-docker }}
-      - run: npm install
+      - run: npm ci
         if: ${{ inputs.is-docker }}
 
       - run: ${{ inputs.test-script }}