From 598035abd35535cdedf85abef59847c0091f4c0a Mon Sep 17 00:00:00 2001 From: Andrew Rubin Date: Wed, 21 Oct 2026 12:02:10 -0700 Subject: [PATCH 1/2] fix(workflow): remove unnecessary registry_url from node setup action, ensure NODE_AUTH_TOKEN is defined up front --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0002991..4c53ed1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,6 +24,8 @@ jobs: pull-requests: write # to create pull request (changesets/action) name: Release runs-on: ubuntu-latest + env: + NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} steps: - name: Checkout Repo uses: actions/checkout@v7 @@ -32,8 +34,6 @@ jobs: uses: actions/setup-node@v7 with: node-version-file: '.nvmrc' - cache: yarn - registry-url: 'https://registry.npmjs.org' - name: Install Dependencies run: yarn --frozen-lockfile From 50965c2f39a194eb717c0639b93dab9237a079b7 Mon Sep 17 00:00:00 2001 From: Liam Egan Date: Wed, 21 Oct 2026 12:20:13 -0700 Subject: [PATCH 2/2] Updating release action to take advantage of trusted publishing --- .github/workflows/release.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4c53ed1..47762a2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,10 +22,9 @@ jobs: contents: write # to create release (changesets/action) issues: write # to post issue comments (changesets/action) pull-requests: write # to create pull request (changesets/action) + id-token: write # to publish to npm via trusted publishing (OIDC) name: Release runs-on: ubuntu-latest - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} steps: - name: Checkout Repo uses: actions/checkout@v7 @@ -33,7 +32,7 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v7 with: - node-version-file: '.nvmrc' + node-version: '24' - name: Install Dependencies run: yarn --frozen-lockfile @@ -52,4 +51,3 @@ jobs: publish-script: yarn release env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_TOKEN }}