Skip to content

ci: migrate to npm OIDC trusted publishing#2261

Merged
josephfusco merged 1 commit intocanaryfrom
ci/npm-oidc-trusted-publishing
Feb 12, 2026
Merged

ci: migrate to npm OIDC trusted publishing#2261
josephfusco merged 1 commit intocanaryfrom
ci/npm-oidc-trusted-publishing

Conversation

@josephfusco
Copy link
Member

@josephfusco josephfusco commented Feb 12, 2026

Replace NPM_TOKEN with OIDC authentication for npm publishing:

  • Add id-token permission for OIDC authentication
  • Upgrade to Node.js 22.x (includes npm with OIDC support)
  • Remove .npmrc creation step and NPM_TOKEN references
  • Add publishConfig with provenance to all published packages

Fixes #2246

Replace NPM_TOKEN with OIDC authentication for npm publishing:
- Add id-token permission for OIDC authentication
- Upgrade to Node.js 22.x (includes npm with OIDC support)
- Remove .npmrc creation step and NPM_TOKEN references
- Add publishConfig with provenance to all published packages
@changeset-bot
Copy link

changeset-bot bot commented Feb 12, 2026

⚠️ No Changeset found

Latest commit: 1ce7fcc

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@josephfusco josephfusco marked this pull request as ready for review February 12, 2026 12:27
@josephfusco josephfusco requested a review from a team as a code owner February 12, 2026 12:27
@github-actions
Copy link
Contributor

📦 Next.js Bundle Analysis for @faustwp/getting-started-example

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

@josephfusco josephfusco merged commit 227ec3c into canary Feb 12, 2026
16 checks passed
@josephfusco josephfusco deleted the ci/npm-oidc-trusted-publishing branch February 12, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Faust releases are not working

2 participants