You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
ci: bump publish workflow to Node 24 for npm 11.x (#28)
Node 20 ships npm 10.8.2, which has a known bug where OIDC trusted
publishing silently falls back to token auth and the registry returns
a misleading 404 instead of a proper auth error. Node 24 ships npm
11.x which fixes this.
The previous workflow (PR #26) included `npm install -g npm@latest`
which masked the issue by upgrading npm in-place. That step was
removed during review for being non-deterministic, but the underlying
need for npm 11+ remained. Bumping Node 24 is the clean fix.
Repro: release v0.2.0 (run 26021426363) failed twice with
`E404 ... 'wechat-acp@0.2.0' is not in this registry` despite
Trusted Publisher being correctly configured on npmjs.com.
Refs: https://github.com/npm/cli/issues/8730
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>