Skip to content

ci: npm >= 11.5.1 in the release job for trusted publishing #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ryansolid merged 1 commit into from
Sep 6, 2026
+8 −1
Merged

ci: npm >= 11.5.1 in the release job for trusted publishing #8

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,11 @@ jobs:
# repo + this workflow file registered as a Trusted Publisher on
# npmjs.com. npm only allows that on an EXISTING package, so the first
# publish of each name is a manual `pnpm release` by a maintainer.
#
# The OIDC exchange lives in the npm CLI itself and needs npm >= 11.5.1;
# with an older npm the PUT goes out unauthenticated and the registry
# answers E404. Node 22 bundles npm 10, hence Node 24 plus an explicit
# upgrade rather than trusting whatever the runner image bundles.
release:
needs: test
runs-on: ubuntu-latest
Expand All @@ -43,9 +48,11 @@ jobs:
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v4
with:
node-version: 22
node-version: 24
cache: pnpm
registry-url: https://registry.npmjs.org
- name: npm with trusted publishing support
run: npm install -g npm@latest && npm --version
- run: pnpm install --frozen-lockfile
- name: Create Release Pull Request or Publish to npm
uses: changesets/action@v1
Expand Down
Loading