Configure GitHub workflow to use trusted publishing (#86)

* Configure GitHub workflow to use trusted publishing

* Upgrade configcat-common to v9.4.1

* Bump version

Author: adams85

.github/workflows/node-ci.yml

@@ -8,9 +8,9 @@ on:
     tags: [ 'v[0-9]+.[0-9]+.[0-9]+' ]
   pull_request:
     branches: [ master ]
-    
+
   workflow_dispatch:
-  
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}
@@ -24,60 +24,65 @@ jobs:
             os: macOS-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node-version }}
-        
+
       - name: Install dependencies
         run: npm install
-          
+
       - name: Build
         run: npm run build
-        
+
       - name: Test
         run: npm run test
-  
+
   coverage:
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: 14
-        
+
       - name: Install dependencies
         run: |
           npm install codecov -g
           npm install
-          
+
       - name: Build
         run: npm run build
-        
+
       - name: Test
         run: npm run test
-        
+
       - name: Upload coverage report
         run: codecov
 
   publish:
     needs: coverage
-    runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags')
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Required for OIDC (see also https://docs.npmjs.com/trusted-publishers)
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v5
         with:
-          node-version: 14
+          node-version: 22
           registry-url: 'https://registry.npmjs.org'
-          
-      - name: Install dependencies
+
+      # Ensure npm 11.5.1 or later is installed
+      - name: Update npm
+        run: npm install -g npm@latest
+
+      - name: Install dependencies & build
         run: npm install
-        
+
       - name: 🚀Publish
         run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_API_KEY }}

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "configcat-node",
-  "version": "11.4.0",
+  "version": "11.4.1",
   "description": "Official ConfigCat SDK to help you access your feature flags from a Node.js application.",
   "main": "lib/client.js",
   "types": "lib/client.d.ts",
@@ -32,7 +32,7 @@
   },
   "engine-strict": true,
   "dependencies": {
-    "configcat-common": "9.4.0",
+    "configcat-common": "9.4.1",
     "tslib": "^2.4.1",
     "tunnel": "0.0.6"
   },