Skip to content

Commit 4b0aeb3

Browse files
committed
Correct timeline for npm OIDC publishing
1 parent 3992207 commit 4b0aeb3

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

fern/products/sdks/overview/typescript/publishing-to-npm.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ registry](https://www.npmjs.com/). After following the steps on this page,
88
you'll have a versioned package published on npm.
99

1010
<Warning title="Already publishing to npm?">
11-
If you're currently using token-based authentication, npmjs is deprecating long-lived tokens in early 2025. See [Migrating from token-based to OpenID Connect (OIDC) publishing](#migrating-from-token-based-to-oidc-publishing) to upgrade to the more secure OIDC authentication.
11+
If you're currently using token-based authentication, npmjs is deprecating long-lived tokens in mid-November 2025. See [Migrating from token-based to OpenID Connect (OIDC) publishing](#migrating-from-token-based-to-oidc-publishing) to upgrade to the more secure OIDC authentication.
1212
</Warning>
1313

1414
<Frame>
@@ -113,7 +113,7 @@ groups:
113113
Choose how you want to authenticate with npmjs when publishing.
114114
115115
<Warning>
116-
**Starting in early 2025**, npmjs.org is deprecating long-lived authentication tokens for publishing from CI/CD workflows. **OpenID Connect (OIDC) authentication is strongly recommended** for security.
116+
**Starting mid-November 2025**, npmjs.org is deprecating long-lived authentication tokens for publishing from CI/CD workflows. **OpenID Connect (OIDC) authentication is strongly recommended** for security.
117117
</Warning>
118118
119119
<AccordionGroup>
@@ -205,7 +205,7 @@ Provenance attestations aren't generated for packages published from private rep
205205
<Accordion title="Token-based authentication (Legacy)">
206206

207207
<Warning>
208-
**This method is being deprecated by npmjs.org in early 2025.** Long-lived authentication tokens can be exposed in logs, compromised, and are difficult to manage and rotate. [OIDC-based authentication is strongly recommended instead](#migrating-from-token-based-to-oidc-publishing).
208+
**This method is being deprecated by npmjs.org in mid-November 2025.** Long-lived authentication tokens can be exposed in logs, compromised, and are difficult to manage and rotate. [OIDC-based authentication is strongly recommended instead](#migrating-from-token-based-to-oidc-publishing).
209209
</Warning>
210210

211211
<Steps>

0 commit comments

Comments
 (0)