From b0908758e44a3880b87052db783b632a729d6abe Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 6 Jan 2026 13:31:03 +0000 Subject: [PATCH 01/10] Initial plan From dfc263890f4c847f263c7a351b75acf9e606d946 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 6 Jan 2026 13:34:34 +0000 Subject: [PATCH 02/10] Replace npm token auth with OIDC trusted publishing Co-authored-by: jeswr <63333554+jeswr@users.noreply.github.com> --- .github/workflows/ci.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7d899cf3..8bd9ebf2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -2,6 +2,7 @@ name: CI permissions: contents: write pull-requests: write + id-token: write on: push: branches: @@ -74,6 +75,7 @@ jobs: - uses: actions/setup-node@v6 with: node-version: 20.x + registry-url: 'https://registry.npmjs.org' - uses: rlespinasse/github-slug-action@v4.x - name: Append commit hash to package version run: 'sed -i -E "s/(\"version\": *\"[^\"]+)/\1-${GITHUB_SHA_SHORT}/" package.json' @@ -82,7 +84,6 @@ jobs: - uses: JS-DevTools/npm-publish@v4.1.2 if: github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' with: - token: ${{ secrets.NPM_TOKEN }} tag: ${{ env.GITHUB_REF_SLUG }} npm-publish-latest: @@ -96,10 +97,10 @@ jobs: - uses: actions/setup-node@v6 with: node-version: 20.x + registry-url: 'https://registry.npmjs.org' - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' - uses: JS-DevTools/npm-publish@v4.1.2 if: github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' with: - token: ${{ secrets.NPM_TOKEN }} tag: latest From c737309b2d134f81e2261b40f9e50d31b80a7728 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 6 Jan 2026 13:36:07 +0000 Subject: [PATCH 03/10] Fix trailing whitespace in ci.yml Co-authored-by: jeswr <63333554+jeswr@users.noreply.github.com> --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8bd9ebf2..3c54ff20 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -101,6 +101,6 @@ jobs: - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' - uses: JS-DevTools/npm-publish@v4.1.2 - if: github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' + if: github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' with: tag: latest From e7878f992b3685f03ce74c650ab76812edae2583 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 6 Jan 2026 13:57:53 +0000 Subject: [PATCH 04/10] Use npm CLI directly instead of JS-DevTools action Co-authored-by: jeswr <63333554+jeswr@users.noreply.github.com> --- .github/workflows/ci.yml | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3c54ff20..049faec1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -68,6 +68,7 @@ jobs: npm-publish-build: needs: build runs-on: ubuntu-latest + if: github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' steps: - uses: actions/download-artifact@v7 with: @@ -76,20 +77,19 @@ jobs: with: node-version: 20.x registry-url: 'https://registry.npmjs.org' + - run: npm i -g npm@latest - uses: rlespinasse/github-slug-action@v4.x - name: Append commit hash to package version run: 'sed -i -E "s/(\"version\": *\"[^\"]+)/\1-${GITHUB_SHA_SHORT}/" package.json' - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' - - uses: JS-DevTools/npm-publish@v4.1.2 - if: github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' - with: - tag: ${{ env.GITHUB_REF_SLUG }} + - name: Publish to npm + run: npm publish --tag ${{ env.GITHUB_REF_SLUG }} npm-publish-latest: needs: [build, npm-publish-build] runs-on: ubuntu-latest - if: github.ref == 'refs/heads/main' + if: github.ref == 'refs/heads/main' && github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' steps: - uses: actions/download-artifact@v7 with: @@ -98,9 +98,8 @@ jobs: with: node-version: 20.x registry-url: 'https://registry.npmjs.org' + - run: npm i -g npm@latest - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' - - uses: JS-DevTools/npm-publish@v4.1.2 - if: github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' - with: - tag: latest + - name: Publish to npm + run: npm publish --tag latest From af3d10a5abfed571e7f11003e5a13b91709c6349 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 6 Jan 2026 13:59:50 +0000 Subject: [PATCH 05/10] Pin npm version to ^11.5.1 for OIDC support Co-authored-by: jeswr <63333554+jeswr@users.noreply.github.com> --- .github/workflows/ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 049faec1..88ed9473 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -77,7 +77,7 @@ jobs: with: node-version: 20.x registry-url: 'https://registry.npmjs.org' - - run: npm i -g npm@latest + - run: npm i -g npm@^11.5.1 - uses: rlespinasse/github-slug-action@v4.x - name: Append commit hash to package version run: 'sed -i -E "s/(\"version\": *\"[^\"]+)/\1-${GITHUB_SHA_SHORT}/" package.json' @@ -98,7 +98,7 @@ jobs: with: node-version: 20.x registry-url: 'https://registry.npmjs.org' - - run: npm i -g npm@latest + - run: npm i -g npm@^11.5.1 - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' - name: Publish to npm From 6b3bb08c5c3eb85e25e348f3f2a544ab0b12f39a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 6 Jan 2026 14:24:21 +0000 Subject: [PATCH 06/10] Use Node.js 22 from setup-node instead of npm install Co-authored-by: jeswr <63333554+jeswr@users.noreply.github.com> --- .github/workflows/ci.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 88ed9473..be4fa7ac 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -75,9 +75,8 @@ jobs: name: build - uses: actions/setup-node@v6 with: - node-version: 20.x + node-version: 22.x registry-url: 'https://registry.npmjs.org' - - run: npm i -g npm@^11.5.1 - uses: rlespinasse/github-slug-action@v4.x - name: Append commit hash to package version run: 'sed -i -E "s/(\"version\": *\"[^\"]+)/\1-${GITHUB_SHA_SHORT}/" package.json' @@ -96,9 +95,8 @@ jobs: name: build - uses: actions/setup-node@v6 with: - node-version: 20.x + node-version: 22.x registry-url: 'https://registry.npmjs.org' - - run: npm i -g npm@^11.5.1 - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' - name: Publish to npm From cbff3cf9286f711410f09fe3107b85f5954af9ee Mon Sep 17 00:00:00 2001 From: Jesse Wright <63333554+jeswr@users.noreply.github.com> Date: Tue, 6 Jan 2026 17:04:39 +0000 Subject: [PATCH 07/10] Add Node.js 24.x to CI workflow --- .github/workflows/ci.yml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index be4fa7ac..08090658 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,6 +20,7 @@ jobs: node-version: - 20.x - 22.x + - 24.x steps: - uses: actions/checkout@v6 - name: Use Node.js ${{ matrix.node-version }} @@ -31,7 +32,7 @@ jobs: - run: npm run build - run: npm run doc - name: Save build - if: matrix.node-version == '20.x' + if: matrix.node-version == '24.x' uses: actions/upload-artifact@v6 with: name: build @@ -75,7 +76,7 @@ jobs: name: build - uses: actions/setup-node@v6 with: - node-version: 22.x + node-version: 24.x registry-url: 'https://registry.npmjs.org' - uses: rlespinasse/github-slug-action@v4.x - name: Append commit hash to package version @@ -95,9 +96,9 @@ jobs: name: build - uses: actions/setup-node@v6 with: - node-version: 22.x + node-version: 24.x registry-url: 'https://registry.npmjs.org' - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' - name: Publish to npm - run: npm publish --tag latest + run: npm publish From 1dfb900b7ef7fe788beb131a97b0fd210387df19 Mon Sep 17 00:00:00 2001 From: Jesse Wright <63333554+jeswr@users.noreply.github.com> Date: Tue, 6 Jan 2026 23:56:19 +0000 Subject: [PATCH 08/10] Update package.json --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 8fe98c32..10580d82 100644 --- a/package.json +++ b/package.json @@ -42,7 +42,7 @@ }, "repository": { "type": "git", - "url": "git+https://github.com/solidos/solid-ui.git" + "url": "https://github.com/solidos/solid-ui" }, "keywords": [ "solid", From dbbf23db1c5839beda9b88b407199d0febc80004 Mon Sep 17 00:00:00 2001 From: Jesse Wright <63333554+jeswr@users.noreply.github.com> Date: Wed, 7 Jan 2026 00:04:00 +0000 Subject: [PATCH 09/10] Check npm version check before publishing --- .github/workflows/ci.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 08090658..70d75d34 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -100,5 +100,7 @@ jobs: registry-url: 'https://registry.npmjs.org' - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' + - name: Check npm version + run: npm --version - name: Publish to npm run: npm publish From 74d44c4184c829176f17fe87b02225d0a2f6174d Mon Sep 17 00:00:00 2001 From: Jesse Wright <63333554+jeswr@users.noreply.github.com> Date: Wed, 7 Jan 2026 00:04:45 +0000 Subject: [PATCH 10/10] Add npm version check to CI workflow --- .github/workflows/ci.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 70d75d34..9efd9dee 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -83,6 +83,8 @@ jobs: run: 'sed -i -E "s/(\"version\": *\"[^\"]+)/\1-${GITHUB_SHA_SHORT}/" package.json' - name: Disable pre- and post-publish actions run: 'sed -i -E "s/\"((pre|post)publish)/\"ignore:\1/" package.json' + - name: Check npm version + run: npm --version - name: Publish to npm run: npm publish --tag ${{ env.GITHUB_REF_SLUG }}