From 793c610984ad1b60e2842d5ed1c2e28a9f9d688d Mon Sep 17 00:00:00 2001
From: Rafael Cardenas <rafael@rafaelcr.com>
Date: Sun, 21 Dec 2025 18:54:23 -0600
Subject: [PATCH] ci: fix trusted publishing by upgrading npm

---
 .github/workflows/ci.yml | 30 +++++++++++++++++-------------
 .gitignore               |  1 +
 .nvmrc                   |  1 +
 3 files changed, 19 insertions(+), 13 deletions(-)
 create mode 100644 .nvmrc

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 12a00e7..245fcfd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
           targets: x86_64-unknown-linux-musl
       - uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version-file: .nvmrc
       - uses: Swatinem/rust-cache@v2
       - name: Download x86_64-linux-musl-cross toolchain
         run: curl -O -L -C - https://github.com/musl-cc/musl.cc/releases/download/v0.0.1/x86_64-linux-musl-cross.tgz
@@ -64,7 +64,7 @@ jobs:
           targets: aarch64-unknown-linux-musl
       - uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version-file: .nvmrc
       - uses: Swatinem/rust-cache@v2
       - name: Download aarch64-linux-musl-cross toolchain
         run: curl -O -L -C - https://github.com/musl-cc/musl.cc/releases/download/v0.0.1/aarch64-linux-musl-cross.tgz
@@ -101,7 +101,7 @@ jobs:
           targets: x86_64-unknown-linux-gnu
       - uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version-file: .nvmrc
       - uses: Swatinem/rust-cache@v2
       - name: npm i
         run: npm i
@@ -124,7 +124,7 @@ jobs:
           targets: aarch64-unknown-linux-gnu
       - uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version-file: .nvmrc
       - uses: Swatinem/rust-cache@v2
       - name: Install cross compile deps
         run: |
@@ -156,7 +156,7 @@ jobs:
           targets: x86_64-pc-windows-msvc
       - uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version-file: .nvmrc
       - uses: Swatinem/rust-cache@v2
       - name: npm i
         run: npm i
@@ -178,7 +178,7 @@ jobs:
           targets: x86_64-apple-darwin
       - uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version-file: .nvmrc
       - uses: Swatinem/rust-cache@v2
       - name: npm i
         run: npm i
@@ -199,7 +199,7 @@ jobs:
           targets: aarch64-apple-darwin
       - uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version-file: .nvmrc
       - uses: Swatinem/rust-cache@v2
       - name: Configure macos-arm64 cross compile
         run: |
@@ -382,6 +382,15 @@ jobs:
         with:
           persist-credentials: false
 
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: .nvmrc
+
+      - name: Upgrade to latest npm
+        run: |
+          npm install -g npm@latest
+          npm -v
+
       - name: Get bot user ID
         id: bot-user-id
         run: |
@@ -389,10 +398,6 @@ jobs:
         env:
           GH_TOKEN: ${{ steps.generate_token.outputs.token }}
 
-      - uses: actions/setup-node@v6
-        with:
-          node-version: '20'
-
       - uses: actions/download-artifact@v6
         with:
           path: native
@@ -404,12 +409,11 @@ jobs:
           ls -R ./native
 
       - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
+        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6
         id: semantic
         if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
         env:
           GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           SEMANTIC_RELEASE_PACKAGE: ${{ github.event.repository.name }}
           GIT_AUTHOR_EMAIL: "${{ steps.bot-user-id.outputs.user-id }}+${{ steps.generate_token.outputs.app-slug }}[bot]@users.noreply.github.com"
           GIT_COMMITTER_EMAIL: "${{ steps.bot-user-id.outputs.user-id }}+${{ steps.generate_token.outputs.app-slug }}[bot]@users.noreply.github.com"
diff --git a/.gitignore b/.gitignore
index 4962b91..395199f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@ perf-tests/decode-stx-address/results
 perf-tests/decode-post-conditions/results
 perf-tests/encode-stx-address/results
 perf-tests/decode-contract-call-args/results
+.DS_Store
diff --git a/.nvmrc b/.nvmrc
new file mode 100644
index 0000000..85aee5a
--- /dev/null
+++ b/.nvmrc
@@ -0,0 +1 @@
+v20
\ No newline at end of file