From 002113422cfff05d9210d05cdb5afa5223a030bd Mon Sep 17 00:00:00 2001 From: Lukas Obermann Date: Mon, 3 Mar 2025 11:49:07 +0100 Subject: [PATCH] ci: upgrade setup-node and generate provenance when publishing --- .github/workflows/npm-publish.yml | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index bbe8206..9729b32 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -13,23 +13,26 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - - uses: actions/setup-node@v3 + - uses: actions/setup-node@v4 with: - node-version: 21 + node-version: 22 - run: npm ci - run: npm test publish-npm: needs: test runs-on: ubuntu-latest + permissions: + contents: read + id-token: write steps: - uses: actions/checkout@v4 - - uses: actions/setup-node@v3 + - uses: actions/setup-node@v4 with: - node-version: 21 + node-version: 22 registry-url: https://registry.npmjs.org/ - run: npm ci - run: npm run build - - run: npm publish + - run: npm publish --provenance --access public env: NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}