Skip to content

Commit 2ab9306

Browse files
feat(ci): enable trusted publishing (#328)
This commit updates the CI release pipeline to avoid using a secret NPM_TOKEN and use NPM trusted publishing
1 parent e650d6c commit 2ab9306

File tree

1 file changed

+1
-7
lines changed

1 file changed

+1
-7
lines changed

.github/workflows/release.yml

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -184,19 +184,13 @@ jobs:
184184

185185
- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
186186
with:
187-
node-version: ">=22"
188-
189-
- name: Add npmrc
190-
run: |
191-
echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > .npmrc
187+
node-version: ">=24"
192188

193189
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
194190
with:
195191
path: artifacts
196192

197193
- name: Publish componentize-js to NPM
198-
env:
199-
NPM_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
200194
shell: bash
201195
run: |
202196
export PACKAGE_FILE_PATH=${{ github.workspace }}/artifacts/artifact/${{ needs.meta.outputs.artifact-name }}

0 commit comments

Comments
 (0)