chore: update npm to ^11.5.1 for OIDC auth support, set node version to LTS 22

Signed-off-by: Jonathan Norris <[email protected]>

Author: jonathannorris

.github/workflows/audit-pending-releases.yml

@@ -1,7 +1,7 @@
 on:
   push:
     branches:
-      - 'release-please**'
+      - "release-please**"
 
 env:
   CORE_PACKAGE: core
@@ -29,6 +29,6 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           registry-url: "https://registry.npmjs.org"
-          cache: 'npm'
+          cache: "npm"

.github/workflows/coverage.yml

@@ -15,9 +15,9 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          registry-url: 'https://registry.npmjs.org'
-          node-version: 20
-          cache: 'npm'
+          registry-url: "https://registry.npmjs.org"
+          node-version: 22
+          cache: "npm"
 
       - name: Install
         run: npm ci

.github/workflows/pr-checks.yaml

@@ -26,7 +26,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-          cache: 'npm'
+          cache: "npm"
 
       - name: Install
         run: npm ci
@@ -50,8 +50,8 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
-          cache: 'npm'
+          node-version: 22
+          cache: "npm"
 
       - name: Install
         run: npm ci
@@ -72,8 +72,8 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
-          cache: 'npm'
+          node-version: 22
+          cache: "npm"
 
       - name: Install
         run: npm ci

.github/workflows/release-please.yml

@@ -2,7 +2,9 @@ on:
   push:
     branches:
       - main
+
 name: Run Release Please
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -38,17 +40,16 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
       - name: Generate SBOM
         run: |
-          npm install -g npm@^10.2.0
+          npm install -g npm@^11.5.1
           npm ci
           npm sbom --sbom-format=cyclonedx --omit=dev --omit=peer --workspace=${{matrix.release}} > bom.json
       - name: Attach SBOM to artifact
         env:
           GITHUB_TOKEN: ${{secrets.RELEASE_PLEASE_ACTION_TOKEN}}
-        run:
-          gh release upload $TAG bom.json
+        run: gh release upload $TAG bom.json
 
   npm-release:
     needs: release-please
@@ -65,9 +66,11 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           registry-url: "https://registry.npmjs.org"
-          cache: 'npm'
+          cache: "npm"
+      - name: Update npm (for OIDC auth)
+        run: npm install -g npm@^11.5.1
       - name: Build Packages
         run: |
           npm ci
@@ -77,7 +80,6 @@ jobs:
       # Our scripts only publish versions that do not already exist.
       - name: Publish to NPM
         env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
           # https://docs.npmjs.com/generating-provenance-statements
           NPM_CONFIG_PROVENANCE: true
         run: npm run publish-all

.gitignore

@@ -112,6 +112,7 @@ typedoc
 
 # IDE
 .idea
+.cursor/
 
 # license files copied from root
 packages/**/LICENSE