Skip to content

Set up npm trusted publisher#1

Open
Copilot wants to merge 4 commits intomainfrom
copilot/set-up-trusted-publisher-workflow
Open

Set up npm trusted publisher#1
Copilot wants to merge 4 commits intomainfrom
copilot/set-up-trusted-publisher-workflow

Conversation

Copy link
Copy Markdown

Copilot AI commented Apr 25, 2026

  • Add id-token: write permission for npm trusted publisher
  • Add --provenance flag to npm publish
  • Use Node.js 22 in actions/setup-node

@fregante fregante changed the title Set up npm trusted publisher, update action references, migrate repo URLs to refined-github Set up npm trusted publisher Apr 25, 2026
@fregante fregante marked this pull request as ready for review April 25, 2026 12:07
@fregante fregante requested a review from SunsetTechuila April 25, 2026 12:16
@fregante
Copy link
Copy Markdown
Member

@SunsetTechuila new repo in the org!

with:
registry-url: 'https://registry.npmjs.org'
- uses: actions/checkout@v6
- uses: actions/setup-node@v6
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@fregante
Copy link
Copy Markdown
Member

@copilot use node 22 in setup-node

Copy link
Copy Markdown
Author

Copilot AI commented Apr 25, 2026

@copilot use node 22 in setup-node

Done in 19ea06f.

Copilot AI requested a review from fregante April 25, 2026 12:56
- uses: actions/setup-node@v6
with:
registry-url: 'https://registry.npmjs.org'
node-version: '22'
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would use

Suggested change
node-version: '22'
node-version: lts/*

Copy link
Copy Markdown
Member

@fregante fregante Apr 25, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a temporary workaround, we should prefer setting the engine field. Here we can't set it because it would be a breaking change and we're just following the source package's versioning.

They're not too far behind though, so soon: https://github.com/primer/octicons/blob/711ef28bd38aecc89380c5183caa91014f85c8f8/.github/workflows/ci.yml#L15

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actually ☝️🤓 we should prefer devEngines.runtime. I never suggested it because fnm still doesn't support it 😭: Schniz/fnm#1433

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants