From 163f91b06be36a795d9e8bff925f7d0a1b075b53 Mon Sep 17 00:00:00 2001 From: Stephane Moser Date: Thu, 21 May 2026 22:49:20 +0100 Subject: [PATCH] CICDL-258: switch npm publishing to OIDC Trusted Publishers, upgrade to Node 24 Node 24 ships npm 11.x which is required for OIDC Trusted Publishers (npm 10.x in Node 22 does not support it). Adds permissions block and use_trusted_publisher flag to the publish workflow; supported_versions extended to [22,24]. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/cicd_npm-publish.yml | 4 ++++ .nvmrc | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/cicd_npm-publish.yml b/.github/workflows/cicd_npm-publish.yml index 64569a9..59984a8 100644 --- a/.github/workflows/cicd_npm-publish.yml +++ b/.github/workflows/cicd_npm-publish.yml @@ -9,7 +9,11 @@ jobs: publish: if: ${{ github.event.label.name == 'npm-ready-for-publish' }} uses: pipedrive-actions/github-actions-workflows/.github/workflows/reusable_cicd-npm-publish.yml@master + permissions: + id-token: write + contents: write with: revision: ${{ github.event.pull_request.head.ref }} supported_versions: '[22]' + use_trusted_publisher: true secrets: inherit diff --git a/.nvmrc b/.nvmrc index 2bd5a0a..a45fd52 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -22 +24