Use OIDC for Stainless npm publishing

[rgarcia]

Summary

• switch the Stainless TypeScript target from npm: true to npm OIDC publishing
• configure stainless.yaml to use publish.npm.auth_method: oidc
• align Hypeman's SDK publishing config with npm trusted publishing

Test plan

• verify the Stainless preview workflow runs on this PR
• after merge, confirm Stainless uses OIDC for the TypeScript npm publish flow
• confirm the next @onkernel/hypeman release publishes successfully without an npm token

Made with Cursor

---

Note

Medium Risk
Changes the npm publish authentication mechanism for the TypeScript SDK, which could break release/publish automation if OIDC/trusted publishing isn’t correctly configured in npm/GitHub.

Overview
Updates stainless.yaml to migrate the TypeScript target’s npm publishing config from publish.npm: true to an explicit publish.npm.auth_method: oidc, enabling npm trusted publishing (OIDC) instead of token-based auth for @onkernel/hypeman.

^{Written by Cursor Bugbot for commit a0b881f. This will update automatically on new commits. Configure here.}

[github-actions]

✱ Stainless preview builds

This PR will update the hypeman SDKs with the following commit message.

feat: Use OIDC for Stainless npm publishing

✅ hypeman-openapi studio · code

Your SDK build had at least one "note" diagnostic.
generate ✅

✅ hypeman-go studio · code

Your SDK build had at least one "note" diagnostic.
generate ✅ → build ⏭️ → lint ✅ → test ✅

go get github.com/stainless-sdks/hypeman-go@1f4a9a639af2715917d459edea1b71824cde9db8

✅ hypeman-typescript studio · code

Your SDK build had at least one "note" diagnostic.
generate ✅ → build ✅ → lint ✅ → test ✅

---

This comment is auto-generated by GitHub Actions and is automatically kept up to date as you push.
If you push custom code to the preview branch, re-run this workflow to update the comment.
Last updated: 2026-03-28 16:30:02 UTC