Skip to content

Conversation

@jakubno
Copy link
Member

@jakubno jakubno commented Oct 27, 2025

Note

Move npm publishing to OIDC by adding id-token permissions and removing NPM_TOKEN, update actions/setup-node to v6, and upgrade npm in workflows.

  • Workflows:
    • OIDC for npm publish:
      • Add permissions: id-token: write in workflows/publish_packages.yml and workflows/release.yml.
      • Remove NPM_TOKEN secret requirement and set NPM_TOKEN: "" in changesets/action env.
    • Node/tooling updates:
      • Bump actions/setup-node from v3 to v6 and set registry-url where needed.
      • Add step to upgrade npm to ^11.6 in publish_packages.yml.
    • Keep pnpm caching/configuration and other steps intact.

Written by Cursor Bugbot for commit 539db59. This will update automatically on new commits. Configure here.

@jakubno jakubno requested a review from ValentaTomas as a code owner October 27, 2025 14:02
@linear
Copy link

linear bot commented Oct 27, 2025

@changeset-bot
Copy link

changeset-bot bot commented Oct 27, 2025

⚠️ No Changeset found

Latest commit: 539db59

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

@jakubno jakubno force-pushed the use-oidc-for-npm-publish-eng-3226 branch from e249101 to 539db59 Compare October 30, 2025 08:52
@jakubno jakubno merged commit 60fb009 into main Oct 30, 2025
7 of 10 checks passed
@jakubno jakubno deleted the use-oidc-for-npm-publish-eng-3226 branch October 30, 2025 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants