Skip to content

chore: Use Trusted Publishing in NPM publish #525

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 20 commits into from
Nov 5, 2025
+14,925 −7,184
Merged

chore: Use Trusted Publishing in NPM publish #525

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
2ec761b
don't create issues if action
lantoli Nov 5, 2025
8bc48ef
CI env var is automatically added
lantoli Nov 5, 2025
2a69454
update comments and registry-url
lantoli Nov 5, 2025
9a7d338
don't pass NPM_TOKEN
lantoli Nov 5, 2025
dccf00d
TEMPORARY see npm version and allow execution
lantoli Nov 5, 2025
720ec48
nodejs update to 24.x
lantoli Nov 5, 2025
c3ca223
common checkout
lantoli Nov 5, 2025
5ce237b
Go version update to 1.25
lantoli Nov 5, 2025
93d63bb
remove yarn
lantoli Nov 5, 2025
41c58a8
java-version update to 21
lantoli Nov 5, 2025
0373884
API.md
lantoli Nov 5, 2025
4a494f6
API.md
lantoli Nov 5, 2025
5e54db0
patch upload
lantoli Nov 5, 2025
d34e9d9
upgrade
lantoli Nov 5, 2025
7749255
npm ci
lantoli Nov 5, 2025
e6f679d
upload patch
lantoli Nov 5, 2025
0513090
revert changes to release.yml
lantoli Nov 5, 2025
abafe04
include hidden files in patch uploda
lantoli Nov 5, 2025
c7c9232
API.md
lantoli Nov 5, 2025
386c777
remove echo
lantoli Nov 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .gitattributes
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

31 changes: 15 additions & 16 deletions .github/workflows/code-health.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,24 +12,19 @@ jobs:
permissions:
contents: write
steps:
- name: Checkout Repository
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
with:
ref: ${{ github.event.pull_request.head.ref }}
repository: ${{ github.event.pull_request.head.repo.full_name }}
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: Setup Node.js
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
node-version: 24.x
- name: Install dependencies
run: yarn install --check-files
Copy link
Collaborator

@manupedrozo manupedrozo Nov 5, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice

Copy link
Member Author

@lantoli lantoli Nov 5, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yep, why 2 package managers when we can have just 1 :-)

run: npm ci
- name: compile
run: npx projen compile
lint:
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: actionlint
run: |
bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
Expand All @@ -38,9 +33,9 @@ jobs:
- name: Setup Node.js
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
node-version: 24.x
- name: Install dependencies
run: yarn install --check-files
run: npm ci
- name: lint
run: npx projen eslint
shellcheck:
Expand All @@ -58,22 +53,26 @@ jobs:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
- run: yarn install --check-files
node-version: 24.x
- run: npm ci
- run: npm install -g cdk-import
- run: ./scripts/cdk-all.sh
- run: npx projen build
- name: Find mutations
id: self_mutation
run: |-
git add .
git diff --staged --patch --exit-code > .repo.patch || echo "self_mutation_happened=true" >> "${GITHUB_OUTPUT}"
git diff --staged --patch > .repo.patch
if [ -s .repo.patch ]; then
echo "self_mutation_happened=true" >> "${GITHUB_OUTPUT}"
fi
- name: Upload patch
if: steps.self_mutation.outputs.self_mutation_happened
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
name: .repo.patch
path: .repo.patch
include-hidden-files: true
Copy link
Collaborator

@manupedrozo manupedrozo Nov 5, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Were hidden files not needed before?

Copy link
Member Author

@lantoli lantoli Nov 5, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i think it's a new param, it took all files before. anyway this is a nit, it's to have a git patch when there are differences, in the normal use case where everything is ok, this is not needed.

- name: Fail build on mutation
if: steps.self_mutation.outputs.self_mutation_happened
run: |-
Expand All @@ -87,8 +86,8 @@ jobs:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
- run: yarn install --check-files
node-version: 24.x
- run: npm ci
- run: npm install -g cdk
- run: npx projen build
- run: npx projen package:js
Expand Down
3 changes: 1 addition & 2 deletions .github/workflows/dependency-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@ jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: Dependency Review
uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a
64 changes: 20 additions & 44 deletions .github/workflows/package.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,17 +7,13 @@ jobs:
runs-on: ubuntu-latest
permissions: {}
steps:
- name: Checkout
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
with:
ref: ${{ github.event.pull_request.head.ref }}
repository: ${{ github.event.pull_request.head.repo.full_name }}
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: Setup Node.js
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
node-version: 24.x
- name: Install dependencies
run: yarn install --check-files
run: npm ci
- name: build
run: npx projen build
package-js:
Expand All @@ -27,14 +23,10 @@ jobs:
steps:
- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
- name: Checkout
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
with:
ref: ${{ github.event.pull_request.head.ref }}
repository: ${{ github.event.pull_request.head.repo.full_name }}
node-version: 24.x
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: Install Dependencies
run: yarn install --check-files --frozen-lockfile
run: npm ci
- name: Create js artifact
run: npx projen compile && npx projen package:js
package-java:
Expand All @@ -45,17 +37,13 @@ jobs:
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
with:
distribution: temurin
java-version: 11.x
java-version: 21.x
- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
- name: Checkout
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
with:
ref: ${{ github.event.pull_request.head.ref }}
repository: ${{ github.event.pull_request.head.repo.full_name }}
node-version: 24.x
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: Install Dependencies
run: yarn install --check-files --frozen-lockfile
run: npm ci
- name: Create java artifact
run: npx projen compile && npx projen package:java
package-python:
Expand All @@ -68,14 +56,10 @@ jobs:
python-version: 3.x
- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
- name: Checkout
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
with:
ref: ${{ github.event.pull_request.head.ref }}
repository: ${{ github.event.pull_request.head.repo.full_name }}
node-version: 24.x
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: Install Dependencies
run: yarn install --check-files --frozen-lockfile
run: npm ci
- name: Create python artifact
run: npx projen compile && npx projen package:python
package-dotnet:
Expand All @@ -88,14 +72,10 @@ jobs:
dotnet-version: 9.0.x
- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
- name: Checkout
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
with:
ref: ${{ github.event.pull_request.head.ref }}
repository: ${{ github.event.pull_request.head.repo.full_name }}
node-version: 24.x
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: Install Dependencies
run: yarn install --check-files --frozen-lockfile
run: npm ci
- name: Create dotnet artifact
run: npx projen compile && npx projen package:dotnet

Expand All @@ -106,17 +86,13 @@ jobs:
steps:
- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00
with:
go-version: ^1.16.0
go-version: ^1.25.0
- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
with:
node-version: 18.x
- name: Checkout
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
with:
ref: ${{ github.event.pull_request.head.ref }}
repository: ${{ github.event.pull_request.head.repo.full_name }}
node-version: 24.x
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: Install Dependencies
run: yarn install --check-files --frozen-lockfile
run: npm ci
- name: Create go artifact
run: npx projen compile && npx projen package:go

Loading
Loading