Anton Pascal
bffab3dd4c
debug: capture npm debug logs and verify publish
2026-02-18 21:49:05 +00:00
Anton Pascal
bbe5124800
fix: proper auth — NPM_TOKEN env + OIDC provenance
...
Previous runs had NODE_AUTH_TOKEN set to a garbage placeholder
because we removed the env var from publish steps. Now properly
passing secrets.NPM_TOKEN as NODE_AUTH_TOKEN.
2026-02-18 21:46:41 +00:00
Anton Pascal
6e7a75f476
fix: try Node 20 + capture debug log on failure
2026-02-18 21:41:54 +00:00
Anton Pascal
bf30c586eb
fix: use OIDC trusted publishers instead of npm token
...
The npm package has trusted publishers (OIDC) configured.
Remove manual token auth — let GitHub Actions OIDC handle it.
2026-02-18 21:38:26 +00:00
Anton Pascal
e3c3331df0
debug: add verbose logging to npm publish
2026-02-18 21:35:28 +00:00
Anton Pascal
f384f55497
fix: manual npmrc auth instead of setup-node registry
2026-02-18 21:32:38 +00:00
Anton Pascal
9b77918e41
fix: pin npm@10 to avoid publish bug
2026-02-18 21:29:36 +00:00
Anton Pascal
5495c1f5fb
fix: remove --provenance flag from npm publish
2026-02-18 21:23:38 +00:00
Anton Pascal
cbcdf98edf
fix: use NPM_TOKEN secret in release workflow
2026-02-18 20:48:25 +00:00
Anton Pascal
c788c981ee
ci: use OIDC trusted publishing instead of NPM_TOKEN
...
- Added environment: npm + id-token: write permission
- Added --provenance flag for supply chain security
- Removed NPM_TOKEN secret dependency
- Added setup-node with registry-url for OIDC auth
2026-02-18 20:28:43 +00:00
Anton Pascal
90b29e619e
ci: add manual release workflow for @pascal-app/core and @pascal-app/viewer
2026-02-18 20:25:03 +00:00
Anton Pascal