From 911dcaae0bc2921e8f1ff2bc0fbc5e3c75eb6069 Mon Sep 17 00:00:00 2001 From: Kazuaki Matsuo Date: Sat, 15 Nov 2025 12:01:19 -0800 Subject: [PATCH] chore: publish via trusted publisher --- .github/workflows/publish.yml | 3 +-- driver/package.json | 2 +- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 63ebc6ab..8e5cd289 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -16,6 +16,7 @@ permissions: contents: write pull-requests: write issues: write + id-token: write # to enable use of OIDC for trusted publishing and npm provenance jobs: build: @@ -56,7 +57,5 @@ jobs: - run: npx semantic-release --branches main env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - # to make the push failure - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} name: Release working-directory: driver diff --git a/driver/package.json b/driver/package.json index 83c83617..4e33baf7 100644 --- a/driver/package.json +++ b/driver/package.json @@ -68,7 +68,7 @@ "@semantic-release/changelog": "^6.0.3", "@semantic-release/git": "^10.0.1", "eslint": "^9.17.0", - "semantic-release": "^24.2.8", + "semantic-release": "^25.0.2", "ts-node": "^10.9.1", "typescript": "~5.9" },