@@ -412,7 +412,10 @@ jobs:
412412 package-manager-cache : false
413413
414414 - name : Update npm
415- run : npm install -g npm@^11.10.0
415+ run : npm install -g npm@^11.16.0
416+
417+ - name : Confirm npm version
418+ run : npm --version
416419
417420 - name : Install
418421 run : npm ci
@@ -438,22 +441,37 @@ jobs:
438441 - name : Verify npm pack contents + install smoke
439442 run : node scripts/verify-native-pack.mjs
440443
444+ - name : Prepare npm OIDC token
445+ run : |
446+ if [ -z "${ACTIONS_ID_TOKEN_REQUEST_URL:-}" ] || [ -z "${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-}" ]; then
447+ echo "GitHub OIDC request environment is missing. Check id-token: write on this job." >&2
448+ exit 1
449+ fi
450+ token_url="${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=npm:registry.npmjs.org"
451+ id_token="$(curl -fsSL -H "Authorization: Bearer ${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" "$token_url" | node -e "let input=''; process.stdin.on('data', d => input += d); process.stdin.on('end', () => process.stdout.write(JSON.parse(input).value || ''));")"
452+ if [ -z "$id_token" ]; then
453+ echo "GitHub OIDC token response was empty." >&2
454+ exit 1
455+ fi
456+ echo "::add-mask::$id_token"
457+ echo "NPM_ID_TOKEN=$id_token" >> "$GITHUB_ENV"
458+
441459 # Publish in dependency order. Separate steps so a single failure
442460 # doesn't block the rest and each package gets its own status in the UI.
443461 - name : Publish @rezi-ui/core
444- run : npm publish -w @rezi-ui/core --access public --tag latest
462+ run : npm publish -w @rezi-ui/core --access public --tag latest --loglevel verbose
445463
446464 - name : Publish @rezi-ui/native
447- run : npm publish -w @rezi-ui/native --access public --tag latest
465+ run : npm publish -w @rezi-ui/native --access public --tag latest --loglevel verbose
448466
449467 - name : Publish @rezi-ui/testkit
450- run : npm publish -w @rezi-ui/testkit --access public --tag latest
468+ run : npm publish -w @rezi-ui/testkit --access public --tag latest --loglevel verbose
451469
452470 - name : Publish @rezi-ui/node
453- run : npm publish -w @rezi-ui/node --access public --tag latest
471+ run : npm publish -w @rezi-ui/node --access public --tag latest --loglevel verbose
454472
455473 - name : Publish @rezi-ui/jsx
456- run : npm publish -w @rezi-ui/jsx --access public --tag latest
474+ run : npm publish -w @rezi-ui/jsx --access public --tag latest --loglevel verbose
457475
458476 - name : Publish create-rezi
459- run : npm publish -w create-rezi --access public --tag latest
477+ run : npm publish -w create-rezi --access public --tag latest --loglevel verbose
0 commit comments