From 4c09fe738e3a34bb1c27d3eaa50bf2e025d6974a Mon Sep 17 00:00:00 2001 From: Philippe Serhal Date: Fri, 23 Oct 2026 14:53:42 -0400 Subject: [PATCH] ci: use NPM Trusted Publishing with provenance MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Requirements are all met, so this should just work: - ✅ npm 11.5.0+ - ✅ node 22.14.0+ - ✅ GitHub-hosted runner - ✅ `id-token: write` permission in release workflow - ✅ This workflow configured as a trusted publisher on the npm package --- .github/workflows/release-please.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index f3ef6580a8f..e52d66a20ad 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -55,13 +55,9 @@ jobs: - name: Publish netlify-cli package run: npm publish --provenance - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} - name: Prepare netlify package run: node scripts/netlifyPackage.js - name: Publish netlify package run: npm publish --provenance - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}