Skip to content
This repository was archived by the owner on Jan 27, 2026. It is now read-only.

Move to a trusted publisher#29

Merged
belen-pruvost merged 1 commit into
mainfrom
trusted-publisher
Nov 6, 2025
Merged

Move to a trusted publisher#29
belen-pruvost merged 1 commit into
mainfrom
trusted-publisher

Conversation

@belen-pruvost

@belen-pruvost belen-pruvost commented Nov 6, 2025

Copy link
Copy Markdown
Contributor

Note

Switches the publish workflow to use OIDC with npm CLI for trusted publishing and adjusts permissions accordingly.

  • CI/CD (GitHub Actions)
    • Publish Workflow (.github/workflows/publish.yml):
      • Switch from pnpm publish with NODE_AUTH_TOKEN to npm publish using OIDC (--provenance, --ignore-scripts).
      • Add permissions.contents: read for the job.
      • Remove token-based env; rely on OIDC for authentication.

Written by Cursor Bugbot for commit 76d4d06. Configure here.

@belen-pruvost
belen-pruvost requested a review from a team November 6, 2025 13:34
@belen-pruvost
belen-pruvost merged commit 6bfea22 into main Nov 6, 2025
4 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants