From 5b9cf506b6b9bb294ab93e8aee93b2b752a1c67d Mon Sep 17 00:00:00 2001 From: Strift Date: Thu, 11 Dec 2025 15:37:04 +0800 Subject: [PATCH 1/2] Configure trusted publishing --- .github/workflows/publish.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 14fef49..32d8d61 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -3,6 +3,10 @@ on: release: types: [published] +permissions: + id-token: write # Required for OIDC + contents: read + jobs: publish-npm: runs-on: ubuntu-latest From 4e8e3d19954356689ad23772ffa84cedb043915a Mon Sep 17 00:00:00 2001 From: Strift Date: Sat, 13 Dec 2025 11:37:16 +0800 Subject: [PATCH 2/2] Remove auth token secret --- .github/workflows/publish.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 32d8d61..de7798a 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -22,5 +22,3 @@ jobs: run: yarn install - name: Publish run: npm publish . - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}