From 07241defc3379bc11a228340da70670f29d35dfa Mon Sep 17 00:00:00 2001 From: Braden Rich Date: Thu, 11 Dec 2025 10:24:27 -0500 Subject: [PATCH] Update NPM to use Trusted Publisher for release --- .github/workflows/release-package.yml | 8 ++++++-- package.json | 2 +- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml index db1e5a1..8560223 100644 --- a/.github/workflows/release-package.yml +++ b/.github/workflows/release-package.yml @@ -4,6 +4,11 @@ on: release: types: [published] +permissions: + id-token: write # Required for OIDC authentication + contents: read + packages: write + jobs: build-npm: runs-on: ubuntu-latest @@ -13,8 +18,7 @@ jobs: with: registry-url: 'https://registry.npmjs.org' - run: npm publish --access public - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} + build-gph: runs-on: ubuntu-latest steps: diff --git a/package.json b/package.json index 3c599d1..d8f6747 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@rolemodel/image-diff", - "version": "1.0.0-beta.2", + "version": "1.0.0", "description": "Image Difference tool that compares pixel by pixel", "packageManager": "yarn@4.12.0", "type": "module",