Merge pull request #403 from asus4/npm-oidc-publish

Remove NPM_TOKEN from publishing script

Author: asus4

.github/workflows/publish-packages.yaml

@@ -5,26 +5,26 @@ on:
   workflow_dispatch:
 env:
   # Dry-run on workflow_dispatch
-  NPM_OPTS: ${{ github.event_name == 'workflow_dispatch' && '--dry-run' || '' }}
+  NPM_OPTS: ${{ github.event_name == 'workflow_dispatch' && '--dry-run --tag canary' || '' }}
+permissions:
+  id-token: write
+  contents: read
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
       with:
         lfs: true
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v5
       with:
+        node-version: 'latest'
         registry-url: 'https://registry.npmjs.org'
+    # Publish NPM using OIDC token
+    - run: npm install -g npm@latest
     - run: npm publish ${{ env.NPM_OPTS }}
       working-directory: Packages/com.github.asus4.tflite
-      env:
-        NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
     - run: npm publish ${{ env.NPM_OPTS }}
       working-directory: Packages/com.github.asus4.tflite.common
-      env:
-        NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
     - run: npm publish ${{ env.NPM_OPTS }}
       working-directory: Packages/com.github.asus4.mediapipe
-      env:
-        NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}

Packages/com.github.asus4.mediapipe/package.json

@@ -10,11 +10,11 @@
   "license": "Apache License 2.0",
   "unity": "2022.3",
   "unityRelease": "0f1",
-  "version": "2.19.0-p2",
+  "version": "2.19.0-p3",
   "hideInEditor": false,
   "dependencies": {
-    "com.github.asus4.tflite": "2.19.0-p2",
-    "com.github.asus4.tflite.common": "2.19.0-p2"
+    "com.github.asus4.tflite": "2.19.0-p3",
+    "com.github.asus4.tflite.common": "2.19.0-p3"
   },
   "documentationUrl": "https://github.com/asus4/tf-lite-unity-sample",
   "changelogUrl": "https://github.com/asus4/tf-lite-unity-sample/releases",

Packages/com.github.asus4.tflite.common/package.json

@@ -9,11 +9,11 @@
   "license": "Apache License 2.0",
   "unity": "2022.3",
   "unityRelease": "0f1",
-  "version": "2.19.0-p2",
+  "version": "2.19.0-p3",
   "hideInEditor": false,
   "dependencies": {
     "com.unity.burst": "1.8.12",
-    "com.github.asus4.tflite": "2.19.0-p2"
+    "com.github.asus4.tflite": "2.19.0-p3"
   },
   "repository": {
     "type": "git",

Packages/com.github.asus4.tflite/package.json

@@ -9,7 +9,7 @@
   "license": "Apache License 2.0",
   "unity": "2022.3",
   "unityRelease": "0f1",
-  "version": "2.19.0-p2",
+  "version": "2.19.0-p3",
   "hideInEditor": false,
   "repository": {
     "type": "git",

Packages/packages-lock.json

@@ -12,8 +12,8 @@
       "depth": 0,
       "source": "embedded",
       "dependencies": {
-        "com.github.asus4.tflite": "2.19.0-p2",
-        "com.github.asus4.tflite.common": "2.19.0-p2"
+        "com.github.asus4.tflite": "2.19.0-p3",
+        "com.github.asus4.tflite.common": "2.19.0-p3"
       }
     },
     "com.github.asus4.texture-source": {
@@ -37,7 +37,7 @@
       "source": "embedded",
       "dependencies": {
         "com.unity.burst": "1.8.12",
-        "com.github.asus4.tflite": "2.19.0-p2"
+        "com.github.asus4.tflite": "2.19.0-p3"
       }
     },
     "com.unity.2d.sprite": {

README.md

@@ -68,11 +68,11 @@ Included prebuilt libraries:
   ],
   "dependencies": {
     // Core TensorFlow Lite libraries
-    "com.github.asus4.tflite": "2.19.0-p2",
+    "com.github.asus4.tflite": "2.19.0-p3",
     // Optional: Utilities for TFLite
-    "com.github.asus4.tflite.common": "2.19.0-p2",
+    "com.github.asus4.tflite.common": "2.19.0-p3",
     // Optional: Utilities for MediaPipe
-    "com.github.asus4.mediapipe": "2.19.0-p2",
+    "com.github.asus4.mediapipe": "2.19.0-p3",
     // Optional: Async methods are available only when UniTask is installed
     "com.cysharp.unitask": "2.5.10",
     ...// other dependencies