Skip to content

Migrate npm publishing to OIDC + Node 24 - #24

Merged
gdgunnars merged 2 commits into
mainfrom
chore/update-npm-publish-flow
Jun 5, 2026
Merged

gdgunnars merged 2 commits into
mainfrom
chore/update-npm-publish-flow

Conversation

@gdgunnars

Copy link
Copy Markdown
Contributor
  • npm trusted publishing (OIDC) — no npm token.
  • Per-job permissions so semantic-release can push and the jobs can publish.
  • Node 24 across CI + dev toolchain (needed for npm ≥ 11.5.1, which OIDC requires).

The release run failed with 403 denied to github-actions[bot] — the token was scoped to
contents: read. OIDC also needs a newer npm than Node 22 ships.

gdgunnars added 2 commits June 5, 2026 12:54
Grant write scopes so semantic-release can push and the jobs can publish.

Node 24 ships npm >= 11.5.1, required for npm trusted publishing (OIDC).
Update .nvmrc, @tsconfig/node24, and @types/node to 24.

Bump TypeScript to 5.9 and typescript-eslint to 8.60 for the lib values node24 requires.
@gdgunnars
gdgunnars merged commit def5682 into main Jun 5, 2026
1 check passed
@gdgunnars
gdgunnars deleted the chore/update-npm-publish-flow branch June 5, 2026 10:59
@github-actions

github-actions Bot commented Jun 5, 2026

Copy link
Copy Markdown

🎉 This PR is included in version 3.0.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants