From d76a8d417e00654b937655ea22ec4509fc9ff5bc Mon Sep 17 00:00:00 2001 From: Alex Date: Sat, 12 Sep 2026 11:43:26 +0100 Subject: [PATCH] feat: trusted publishing npm --- .github/workflows/npm-publish.yml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index 5d2bb09b..371cf463 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -13,6 +13,7 @@ on: permissions: contents: write pull-requests: write + id-token: write jobs: publish: @@ -27,7 +28,7 @@ jobs: - uses: actions/setup-node@v4 with: - node-version: 20 + node-version: 24 registry-url: https://registry.npmjs.org - name: Install dependencies @@ -52,8 +53,6 @@ jobs: - name: Publish docsgpt run: npm publish --verbose - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} # ── docsgpt-react (React library bundle) ───────────────────────────── # Uses `build:react` script (parcel build src/index.ts) and strips @@ -80,8 +79,6 @@ jobs: - name: Publish docsgpt-react run: npm publish --verbose - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} # ── Commit the bumped version back to the repository ─────────────────