From bf79acfbbfebae02c0c615b73bc6ea76429c5595 Mon Sep 17 00:00:00 2001 From: Strift Date: Thu, 11 Dec 2025 15:35:02 +0800 Subject: [PATCH 1/2] Configure trusted publishing --- .github/workflows/publish.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f46b5d9..ccbcd72 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -3,6 +3,10 @@ on: release: types: [published] +permissions: + id-token: write # Required for OIDC + contents: read + jobs: publish-npm: runs-on: ubuntu-latest From e7aa13c0abf6f522328620a47c65a919ab5c40c6 Mon Sep 17 00:00:00 2001 From: Strift Date: Sat, 13 Dec 2025 11:33:49 +0800 Subject: [PATCH 2/2] Remove auth token secret --- .github/workflows/publish.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index ccbcd72..cb39ff9 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -27,10 +27,6 @@ jobs: - name: Publish with latest tag if: "!github.event.release.prerelease && !contains(github.ref, 'beta')" run: npm publish . - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} - name: Publish with beta tag if: "github.event.release.prerelease && contains(github.ref, 'beta')" run: npm publish . --tag beta - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}