From a3d3f07e5c853bed2a5210ed94d0c533e8e6bc4f Mon Sep 17 00:00:00 2001 From: Shiti Saxena Date: Mon, 18 May 2026 15:58:39 -0700 Subject: [PATCH] ci: update npm publish workflow --- .github/workflows/npm-publish.yml | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index a2d9702a..367ee2c3 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -2,20 +2,22 @@ name: Publish Package to npmjs on: release: types: [published] +permissions: + id-token: write # Required for OIDC + contents: read jobs: build: if: github.repository_owner == 'rustic-ai' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v6 + - uses: actions/setup-node@v6 with: - node-version: '20.x' + node-version: '24' registry-url: 'https://registry.npmjs.org' scope: '@rustic-ai' + package-manager-cache: false - run: npm ci - run: npm test - run: npm run build - run: npm publish --access public - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}