Skip to content

ci: switch releases to npm trusted publishing - #3

Merged
Cylop merged 1 commit into
mainfrom
release/v2-launch
Sep 3, 2026
Merged

Cylop merged 1 commit into
mainfrom
release/v2-launch

Conversation

@Cylop

@Cylop Cylop commented Sep 3, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • remove the one-time npm bootstrap token from the release workflow
  • authenticate future publishes exclusively through the configured npm OIDC trusted publisher
  • generalize exact version/channel confirmation for future stable and prerelease versions
  • update release documentation and enforce the token-free workflow in release verification

Verification

  • node scripts/verify-release.mjs
  • npx prettier --check .github/workflows/release.yml scripts/verify-release.mjs docs/RELEASING.md docs/release-readiness.md
  • npx eslint scripts/verify-release.mjs

The public 2.0.0 package and GitHub release already exist; this PR prepares future releases.

@vercel

vercel Bot commented Sep 3, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
readonly-view Ready Ready Preview Sep 3, 2026 10:30pm UTC

@Cylop
Cylop force-pushed the release/v2-launch branch from 28913ef to 48000a1 Compare September 3, 2026 22:25
@Cylop
Cylop merged commit 962e6a0 into main Sep 3, 2026
7 checks passed
@Cylop
Cylop deleted the release/v2-launch branch September 3, 2026 22:37

This branch was successfully deployed

1 active deployment
Preview — 48000a12 Deployed Sep 3, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant