Skip to content

Commit 7af86b1

Browse files
authored
Update publish-npm.yml
Update to use trusted publishing for npm packages.
1 parent 1f7d035 commit 7af86b1

File tree

1 file changed

+11
-6
lines changed

1 file changed

+11
-6
lines changed

.github/workflows/publish-npm.yml

Lines changed: 11 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,12 +4,16 @@ on:
44
release:
55
types: [created]
66

7+
permissions:
8+
id-token: write # Required for OIDC
9+
contents: read
10+
711
jobs:
812
build:
913
runs-on: ubuntu-latest
1014
steps:
11-
- uses: actions/checkout@v3
12-
- uses: actions/setup-node@v3
15+
- uses: actions/checkout@v4
16+
- uses: actions/setup-node@v4
1317
with:
1418
node-version: 21
1519
- run: npm install --package-lock=false
@@ -19,12 +23,13 @@ jobs:
1923
needs: build
2024
runs-on: ubuntu-latest
2125
steps:
22-
- uses: actions/checkout@v3
23-
- uses: actions/setup-node@v3
26+
- uses: actions/checkout@v4
27+
- uses: actions/setup-node@v4
2428
with:
2529
node-version: 21
2630
registry-url: https://registry.npmjs.org/
31+
- name: Update npm
32+
run: npm install -g npm@latest
2733
- run: npm install --package-lock=false
2834
- run: npm publish
29-
env:
30-
NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
35+

0 commit comments

Comments
 (0)