 Anton Pascal
|
bf30c586eb
|
fix: use OIDC trusted publishers instead of npm token
The npm package has trusted publishers (OIDC) configured.
Remove manual token auth — let GitHub Actions OIDC handle it.
|
2026-02-18 21:38:26 +00:00 |
|
|
Anton Pascal
|
e3c3331df0
|
debug: add verbose logging to npm publish
|
2026-02-18 21:35:28 +00:00 |
|
|
Anton Pascal
|
f384f55497
|
fix: manual npmrc auth instead of setup-node registry
|
2026-02-18 21:32:38 +00:00 |
|
|
Anton Pascal
|
9b77918e41
|
fix: pin npm@10 to avoid publish bug
|
2026-02-18 21:29:36 +00:00 |
|
|
Anton Pascal
|
5495c1f5fb
|
fix: remove --provenance flag from npm publish
|
2026-02-18 21:23:38 +00:00 |
|
|
Anton Pascal
|
cbcdf98edf
|
fix: use NPM_TOKEN secret in release workflow
|
2026-02-18 20:48:25 +00:00 |
|
|
Anton Pascal
|
c788c981ee
|
ci: use OIDC trusted publishing instead of NPM_TOKEN
- Added environment: npm + id-token: write permission
- Added --provenance flag for supply chain security
- Removed NPM_TOKEN secret dependency
- Added setup-node with registry-url for OIDC auth
|
2026-02-18 20:28:43 +00:00 |
|
|
Anton Pascal
|
90b29e619e
|
ci: add manual release workflow for @pascal-app/core and @pascal-app/viewer
|
2026-02-18 20:25:03 +00:00 |
|