Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion .github/workflows/publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -188,8 +188,16 @@ jobs:

# Trusted publishing requires npm >=11.5.1 for OIDC token exchange.
# Pin to ^11.5.1 so we don't silently get an older 11.x that lacks OIDC.
#
# Bootstrap via `npx` rather than `npm install -g npm@...` — the latter
# hits a long-standing npm self-upgrade bug (reproduces on github-hosted
# runners too) where mid-reify npm unlinks its own `promise-retry` dep
# and dies with MODULE_NOT_FOUND. Using a fresh npx-fetched npm to
# install itself globally sidesteps the half-upgraded state entirely.
- name: Upgrade npm for trusted publishing
run: npm install -g npm@^11.5.1 && npm --version
run: |
npx --yes npm@^11.5.1 install -g --force npm@^11.5.1
npm --version

- name: Download npm tarball
uses: actions/download-artifact@v8
Expand Down
Loading