Skip to content

Fixes/publish with trusted npm publisher#265

Open
bradhe wants to merge 36 commits intodevelopfrom
fixes/publish-with-trusted-npm-publisher
Open

Fixes/publish with trusted npm publisher#265
bradhe wants to merge 36 commits intodevelopfrom
fixes/publish-with-trusted-npm-publisher

Conversation

@bradhe
Copy link
Copy Markdown
Contributor

@bradhe bradhe commented Apr 23, 2026

Swap the in-place npm install -g npm@latest for npx -y npm@latest publish, avoiding the Node 22.22.x bundled-npm self-upgrade bug (npm/cli#7657).

bradhe and others added 30 commits November 6, 2025 17:46
Bump version to v0.3.38
bradhe added 6 commits April 17, 2026 09:40
v0.3.59 release (redux)
v0.3.59 release (redux redux)
v0.3.59 release (redux redux redux)
dist's generated release.yml grants publish jobs only `id-token: write`
and `packages: write`, so publish-npm.yml and publish-docker.yml were
rejected at workflow-validation time for requesting `contents: read`.

Move the checkout-dependent work into new local-artifacts-jobs
(build-wasm, build-docker) that upload the npm package and Dockerfile
as artifacts. The publish jobs now download those artifacts and need
no `contents` scope.

Also swap the in-place `npm install -g npm@latest` for
`npx -y npm@latest publish`, avoiding the Node 22.22.x bundled-npm
self-upgrade bug (npm/cli#7657).
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 23, 2026

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 2c2a99ed-0ac4-4c6f-8cd2-46ea61583cf2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fixes/publish-with-trusted-npm-publisher

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants