From d96abd859eaf59dab675b863e693b0fe705e7b21 Mon Sep 17 00:00:00 2001 From: Dan Adajian Date: Wed, 17 Dec 2025 09:37:26 -0600 Subject: [PATCH] Update npm publish workflow to support trusted publish --- .github/workflows/npmpublish.yml | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/.github/workflows/npmpublish.yml b/.github/workflows/npmpublish.yml index 2d199cb..3c991cc 100644 --- a/.github/workflows/npmpublish.yml +++ b/.github/workflows/npmpublish.yml @@ -22,16 +22,18 @@ jobs: publish-npm: needs: build runs-on: ubuntu-latest + permissions: + id-token: write + contents: read steps: - - uses: actions/checkout@v2 - - uses: actions/setup-node@v1 + - uses: actions/checkout@v6 + - uses: actions/setup-node@v6 with: - node-version: 18 + node-version: 24 registry-url: https://registry.npmjs.org/ - run: npm install - run: npm publish - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} + # publish-gpr: # needs: build # runs-on: ubuntu-latest