From 7933814d2f2c30c5178f63c7058b81f8a1a3769e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kenneth=20Wu=C3=9Fmann?= Date: Sat, 19 Sep 2026 21:06:33 +0200 Subject: [PATCH] Use npm trusted publishing in release workflow Co-authored-by: Claude Opus 4.8 via [Pi](https://pi.dev/) --- .github/workflows/onRelease.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/onRelease.yml b/.github/workflows/onRelease.yml index a38c544..a21dd94 100644 --- a/.github/workflows/onRelease.yml +++ b/.github/workflows/onRelease.yml @@ -15,7 +15,8 @@ jobs: - uses: actions/setup-node@v7 with: node-version: '24' - registry-url: 'https://registry.npmjs.org' + - name: Update npm for trusted publishing + run: npm install -g npm@latest - uses: pnpm/action-setup@v6 name: Install pnpm id: pnpm-install @@ -37,7 +38,7 @@ jobs: - run: pnpm install - run: pnpm run build - run: pnpm run prepack - - run: npm publish --no-git-checks --access public + - run: npm publish --access public - run: pnpm run postpack - run: pnpm run pack:tarballs - name: Upload tarballs to release