Skip to content

Use npm trusted publishing - #35

Merged
mchatlas-hellosign merged 1 commit into
mainfrom
chore/npm-trusted-publishing
Sep 15, 2026
Merged

mchatlas-hellosign merged 1 commit into
mainfrom
chore/npm-trusted-publishing

Conversation

@mchatlas-hellosign

Copy link
Copy Markdown
Member

Summary

  • grant the publish job OIDC token permission
  • use Node.js 24 and npm 11.19.1 for npm trusted publishing
  • remove the npm API key from production publishing and the dry run

Validation

  • parsed .github/workflows/github-actions.yml as YAML
  • git diff --check

@mwojcik-dropbox mwojcik-dropbox left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mchatlas-hellosign
mchatlas-hellosign merged commit 15ef9a5 into main Sep 15, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants