Skip to content

fix: restore release publish auth fallback#58

Merged
stackbilt-admin merged 1 commit into
mainfrom
fix/release-publish-auth
Jun 2, 2026
Merged

fix: restore release publish auth fallback#58
stackbilt-admin merged 1 commit into
mainfrom
fix/release-publish-auth

Conversation

@stackbilt-admin

Copy link
Copy Markdown
Member

Summary

  • Restore a repo-side publish fallback by passing NODE_AUTH_TOKEN from secrets.NPM_TOKEN when present.
  • Keep npm trusted publishing as the default no-token path and update the release runner to Node 24 with setup-node package-manager caching disabled.
  • Add a publishing runbook documenting trusted publishing configuration, token fallback, and release validation.

Validation

  • npm run typecheck
  • npx vitest run tests/chat-session.test.ts tests/chat-session-auth.test.ts tests/chat-ws.test.ts
  • npm test
  • npx charter validate --ci --format text
  • git -c core.whitespace=blank-at-eol,blank-at-eof,space-before-tab,cr-at-eol diff --check

Fixes #51.

Keep npm trusted publishing as the preferred release path, but make the tag
workflow use NPM_TOKEN when the secret exists so publish does not depend on
npmjs.org trusted-publisher configuration being complete. Document both auth
paths for the next release.

Governed-By: aegis-oss#51
Resolves-Request: aegis-oss#51
@stackbilt-admin stackbilt-admin merged commit 0512218 into main Jun 2, 2026
2 checks passed
@stackbilt-admin stackbilt-admin deleted the fix/release-publish-auth branch June 2, 2026 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CI release publish broken since OIDC migration — npm publish PUT returns 404 (trusted publisher not configured)

1 participant