Skip to content

ci: setup Node.js 24 in npm publish workflow for OIDC - #126

Merged
mulhamna merged 1 commit into
mainfrom
fix/npm-publish-trusted-publishing
Sep 15, 2026
Merged

mulhamna merged 1 commit into
mainfrom
fix/npm-publish-trusted-publishing

Conversation

@mulhamna

Copy link
Copy Markdown
Owner

Summary

  • Add Node.js 24 setup step to npm publish workflow to support tokenless OIDC trusted publishing.
  • Ensure npm CLI version >= 11.5.1 is present in the runner so the OIDC handshake can proceed without failing on ENEEDAUTH.

Changes

  • .github/workflows/npm-publish.yml: Add actions/setup-node with Node 24 before Setup Bun without configuring registry-url, preventing empty auth token injection in .npmrc.

Test plan

  • Run npm run lint
  • Run npm run format:check
  • Run npm test
  • Run npm run release:check
  • Run bun bin/pkgmap.js --help

npm OIDC trusted publishing requires npm CLI 11.5.1 or later.
Without an explicit Node.js 24 setup step, the workflow falls back
to the runner's default npm 10 which lacks tokenless OIDC support
and fails with ENEEDAUTH.
@mulhamna
mulhamna merged commit ca3421d into main Sep 15, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant