From 5501a59ed27681c9a4acae546ac8b62db3e06d84 Mon Sep 17 00:00:00 2001 From: Jakub Novak Date: Mon, 27 Oct 2025 15:04:45 +0100 Subject: [PATCH 1/2] Use OIDC for npm publish --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1ce7fde8..1bd2a6db 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -8,6 +8,7 @@ on: concurrency: ${{ github.workflow }}-${{ github.ref }} permissions: + id-token: write contents: write jobs: @@ -322,7 +323,6 @@ jobs: createGithubReleases: true env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }} - name: Update lock file From 124ce8ed23f9ac63d909ff222ee9f4a175c0f64e Mon Sep 17 00:00:00 2001 From: Jakub Novak Date: Thu, 30 Oct 2025 09:48:53 +0100 Subject: [PATCH 2/2] Update node and npm --- .github/workflows/release.yml | 21 ++++++++++++++------- 1 file changed, 14 insertions(+), 7 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1bd2a6db..3ef0ed82 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -28,9 +28,9 @@ jobs: version: 9.5 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@v6 with: - node-version: "20.x" + node-version: "22.x" registry-url: "https://registry.npmjs.org" cache: pnpm cache-dependency-path: pnpm-lock.yaml @@ -70,9 +70,9 @@ jobs: version: 9.5 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@v6 with: - node-version: "20.x" + node-version: "22.x" registry-url: "https://registry.npmjs.org" cache: pnpm cache-dependency-path: pnpm-lock.yaml @@ -285,10 +285,11 @@ jobs: with: version: 9.5 - - name: Setup Node.js 20 - uses: actions/setup-node@v3 + - name: Setup Node.js 22 + uses: actions/setup-node@v6 with: - node-version: "20.x" + node-version: "22.x" + registry-url: 'https://registry.npmjs.org' cache: pnpm - name: Configure pnpm @@ -296,6 +297,11 @@ jobs: pnpm config set auto-install-peers true pnpm config set exclude-links-from-lockfile true + - name: Update npm + run: | + npm install -g npm@^11.6 + npm --version + - name: Install dependencies run: pnpm install --frozen-lockfile @@ -323,6 +329,7 @@ jobs: createGithubReleases: true env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + NPM_TOKEN: "" # See https://github.com/changesets/changesets/issues/1152#issuecomment-3190884868 PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }} - name: Update lock file