From 5c9479502d3d8ee61981a1533d90b20f145cede6 Mon Sep 17 00:00:00 2001 From: Ricardo Amaral Date: Fri, 24 Oct 2025 17:49:54 +0100 Subject: [PATCH] ci: Temporarily disable npm trusted publishing until we can upgrade Node.js --- .github/workflows/publish.yml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 8526a164..3a6bb521 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -30,8 +30,10 @@ jobs: with: node-version-file: '.nvmrc' - - name: Ensure npm 11.5.1 or later is installed - run: npm install -g npm@latest + # Temporarily disabled until we can upgrade to Node.js 20+ + # ref: https://github.com/Doist/reactist/actions/runs/18786284512/job/53605250671 + # - name: Ensure npm 11.5.1 or later is installed + # run: npm install -g npm@latest # Remove any registry configurations from .npmrc - run: sed -i "/@doist/d" ./.npmrc @@ -66,3 +68,6 @@ jobs: registry-url: https://registry.npmjs.org/ scope: '@doist' - run: npm publish --provenance --access public + # Token-based authentication until we can use OIDC + env: + NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}