ci(release): publish to npm via trusted publishing

Use Node 22 and npm 11.5.1 or later so the release job can authenticate with OIDC. Keep NPM_TOKEN as a fallback until a publish succeeds.
2026-10-12 07:03:40 +00:00 · 2026-10-03 12:26:16 +01:00
parent 9d68cc208e
commit 679139a973
1 changed files with 5 additions and 1 deletions
@@ -58,10 +58,14 @@ jobs:
      - uses: actions/setup-node@v4
        if: steps.version.outputs.version_tag != ''
        with:
-          node-version: '20'
+          node-version: '22'
          registry-url: 'https://registry.npmjs.org'
          cache: 'npm'

+      - name: Upgrade npm for trusted publishing
+        if: steps.version.outputs.version_tag != ''
+        run: npm install -g npm@^11.5.1
+
      - name: Publish to npm
        if: steps.version.outputs.version_tag != ''
        run: |