Skip to content

[chore] Switch to publishing with OIDC - #3342

Merged
sjchmiela merged 5 commits into
mainfrom
stanley/enable-oidc-release
Jan 26, 2026
Merged

[chore] Switch to publishing with OIDC#3342
sjchmiela merged 5 commits into
mainfrom
stanley/enable-oidc-release

Conversation

@sjchmiela

@sjchmiela sjchmiela commented Jan 26, 2026

Copy link
Copy Markdown
Contributor

Why

https://exponent-internal.slack.com/archives/C017N0N99RA/p1769306804484099

How

Applied a few of the changes we've done to eas-build:

Test Plan

Merge and try releasing a new version.

@sjchmiela sjchmiela added the no changelog PR that doesn't require a changelog entry label Jan 26, 2026
@sjchmiela
sjchmiela force-pushed the stanley/enable-oidc-release branch from a466018 to c8947b8 Compare January 26, 2026 11:58
@sjchmiela
sjchmiela force-pushed the stanley/enable-oidc-release branch from c8947b8 to d62f1a1 Compare January 26, 2026 11:59
@github-actions

github-actions Bot commented Jan 26, 2026

Copy link
Copy Markdown

Size Change: +7.53 kB (+0.01%)

Total Size: 53.2 MB

Filename Size Change
./packages/eas-cli/dist/eas-linux-x64.tar.gz 53.2 MB +7.53 kB (+0.01%)

compressed-size-action

@codecov

codecov Bot commented Jan 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 49.67%. Comparing base (6eeb15b) to head (b225b62).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3342   +/-   ##
=======================================
  Coverage   49.67%   49.67%           
=======================================
  Files         671      671           
  Lines       28018    28018           
  Branches     5802     5802           
=======================================
  Hits        13914    13914           
  Misses      12916    12916           
  Partials     1188     1188           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@sjchmiela
sjchmiela marked this pull request as ready for review January 26, 2026 12:33
@github-actions

Copy link
Copy Markdown

Subscribed to pull request

File Patterns Mentions
**/* @douglowder

Generated by CodeMention

@github-actions

Copy link
Copy Markdown

⏩ The changelog entry check has been skipped since the "no changelog" label is present.

run: yarn build
- name: Publish packages to npm
run: yarn lerna publish from-package --yes --no-verify-access
env:

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we need to set the provenance env var here? https://docs.npmjs.com/generating-provenance-statements#using-third-party-package-publishing-tools

As in:

        env:
          NPM_CONFIG_PROVENANCE: true

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I didn't need to do it for eas-build so not sure…

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I used it for the styleguide but I never tried publishing without so I don't know for sure! Maybe lerna handles it under the hood. Can try without and add it if publish fails 🤷‍♀️

@sjchmiela
sjchmiela merged commit b053e09 into main Jan 26, 2026
17 checks passed
@sjchmiela
sjchmiela deleted the stanley/enable-oidc-release branch January 26, 2026 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

no changelog PR that doesn't require a changelog entry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants