Skip to content

Commit 3bac2c8

Browse files
committed
ci: use trusted publishing for npm release
1 parent b9a793f commit 3bac2c8

2 files changed

Lines changed: 3 additions & 6 deletions

File tree

.github/workflows/manual-publish.yml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
- uses: actions/checkout@v4
1414
- uses: actions/setup-node@v4
1515
with:
16-
node-version: 22
16+
node-version: 24
1717
registry-url: 'https://registry.npmjs.org'
1818
cache: 'yarn'
1919
- run: corepack enable
@@ -38,6 +38,4 @@ jobs:
3838
- name: Verify packaged artifacts
3939
run: yarn check:packaged-artifacts
4040
- name: Publish
41-
env:
42-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
4341
run: npm publish --access public --provenance

.github/workflows/npm-publish.yml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
name: Publish Node.js Package
22

33
on:
4+
workflow_dispatch: {}
45
release:
56
types: [published]
67

@@ -21,7 +22,7 @@ jobs:
2122
- name: Setup Node.js (with Corepack/Yarn)
2223
uses: actions/setup-node@v4
2324
with:
24-
node-version: 22
25+
node-version: 24
2526
registry-url: 'https://registry.npmjs.org'
2627
cache: 'yarn'
2728
- run: corepack enable
@@ -57,6 +58,4 @@ jobs:
5758
run: yarn check:packaged-artifacts
5859

5960
- name: Publish to npm
60-
env:
61-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
6261
run: npm publish --access public

0 commit comments

Comments
 (0)