[npm] Switch to npm (v11.7) publish with OIDC support

Co-authored-by: Ona <[email protected]>

Author: geropl

.devcontainer/Dockerfile

@@ -1,5 +1,7 @@
 FROM ubuntu:jammy
 
+ENV REBUILD_TRIGGER=1
+
 ADD https://raw.githubusercontent.com/gitpod-io/workspace-images/main/base/install-packages /usr/bin/install-packages
 RUN chmod +x /usr/bin/install-packages
 
@@ -354,6 +356,8 @@ RUN cd /opt/npm-tools && \
         ln -sf "$bin" /usr/local/bin/$(basename "$bin"); \
     done && \
     rm -rf ~/.npm/_cacache
+# Install newer version of "npm" separately, so it's not overshadowed by the version installed by nvm
+RUN ln -sf /opt/npm-tools/node_modules/.bin/npm /usr/local/bin/npm-11.7
 
 ENV PATH=$PATH:/root/.aws-iam:/root/.terraform:/workspace/bin
 

components/gitpod-protocol/scripts/publish.js

@@ -37,17 +37,12 @@ const tag = qualifier.substr(0, qualifier.lastIndexOf("."));
 
 child_process.execSync(
     [
-        "yarn",
-        "--cwd",
-        pckDir,
+        "npm-11.7",
         "publish",
         "--tag",
         tag,
         "--access",
         "public",
-        "--ignore-scripts",
-        "--network-timeout",
-        "300000",
     ].join(" "),
-    { stdio: "inherit" },
+    { stdio: "inherit", cwd: pckDir },
 );

dev/image/Dockerfile

@@ -145,6 +145,8 @@ RUN sudo chown -R gitpod:gitpod /opt/npm-tools && \
         sudo ln -sf "$bin" /usr/local/bin/$(basename "$bin"); \
     done && \
     rm -rf ~/.npm/_cacache
+# Install newer version of "npm" separately, so it's not overshadowed by the version installed by nvm
+RUN ln -sf /opt/npm-tools/node_modules/.bin/npm /usr/local/bin/npm-11.7
 
 ## Register leeway autocompletion in bashrc
 RUN bash -c "echo . \<\(leeway bash-completion\) >> ~/.bashrc"