Merge pull request #50 from Expensify/andrew-oidc

Update node and permissions to allow publishing via OIDC

Author: luacmartins

.github/workflows/publish.yml

@@ -4,6 +4,11 @@ on:
   push:
     branches: [main]
 
+permissions:
+  # Required for OIDC: https://docs.npmjs.com/trusted-publishers
+  id-token: write
+  contents: read
+
 # Ensure that only one instance of this workflow executes at a time.
 # If multiple PRs are merged in quick succession, there will only ever be one publish workflow running and one pending.
 concurrency: ${{ github.workflow }}

.github/workflows/style_and_syntax_checks.yml

@@ -16,7 +16,7 @@ jobs:
               # v3
               uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7
               with:
-                  node-version: 18
+                  node-version-file: '.nvmrc'
                   cache: npm
 
             - name: Install dependencies

.nvmrc

@@ -1 +1 @@
-20.10.0
+24.11.0