From 679139a9734b8acbff2d17b668fa763df65226b7 Mon Sep 17 00:00:00 2001 From: Lukasz Raczylo Date: Sat, 3 Oct 2026 12:26:16 +0100 Subject: [PATCH] ci(release): publish to npm via trusted publishing Use Node 22 and npm 11.5.1 or later so the release job can authenticate with OIDC. Keep NPM_TOKEN as a fallback until a publish succeeds. --- .github/workflows/release.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 72410fa..424e733 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -58,10 +58,14 @@ jobs: - uses: actions/setup-node@v4 if: steps.version.outputs.version_tag != '' with: - node-version: '20' + node-version: '22' registry-url: 'https://registry.npmjs.org' cache: 'npm' + - name: Upgrade npm for trusted publishing + if: steps.version.outputs.version_tag != '' + run: npm install -g npm@^11.5.1 + - name: Publish to npm if: steps.version.outputs.version_tag != '' run: |