From daa4698788f0ed98c18e58d07910c7032b8b6289 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tomasz=20Cichoci=C5=84ski?= Date: Mon, 25 May 2026 21:55:26 +0200 Subject: [PATCH] ci: align npm publish workflow with npm OIDC docs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps actions/checkout and actions/setup-node to v6 and node-version to 24 to match npm's Trusted Publishing example. Node 24 ships npm >= 11.5.1, which is required for the OIDC token exchange — Node 22 was shipping npm 10.x so the publish was falling back to anonymous and returning a misleading 404 from the registry. --- .github/workflows/npm-publish.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index 53a330e..debba6d 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -25,11 +25,11 @@ jobs: startsWith(github.event.release.tag_name, 'v')) steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: - node-version: "22" + node-version: "24" registry-url: "https://registry.npmjs.org" - name: Install dependencies run: npm ci