Skip to content

ci: change to OIDC Trusted Publishing#51

Merged
hotequil merged 1 commit into
mainfrom
ci-oidc
Jan 28, 2026
Merged

ci: change to OIDC Trusted Publishing#51
hotequil merged 1 commit into
mainfrom
ci-oidc

Conversation

@ixje

@ixje ixje commented Jan 28, 2026

Copy link
Copy Markdown
Member

The old flow used granular tokens, which NPM now decided are only valid for 90 days. Since I don't want to rotate the token(s) every 3 months I've setup a Trusted Publisher connection. Per their documentation this setup requires NPM CLI 11.5.1 or higher, which is why the node version changed.

@ixje
ixje requested review from hotequil and raulduartep January 28, 2026 09:21
@ixje

ixje commented Jan 28, 2026

Copy link
Copy Markdown
Member Author

I don't mind who reviews, I just tagged you both so you are aware of the change.

@hotequil hotequil left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok!

@hotequil
hotequil merged commit c97a5e5 into main Jan 28, 2026
1 check passed
@ixje
ixje deleted the ci-oidc branch January 28, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants