Skip to content

fix: revert semantic-release to v24 to restore npm publish auth - #23

Merged
andrea9293 merged 1 commit into
mainfrom
fix/revert-semantic-npm-v13
Jun 4, 2026
Merged

fix: revert semantic-release to v24 to restore npm publish auth#23
andrea9293 merged 1 commit into
mainfrom
fix/revert-semantic-npm-v13

Conversation

@andrea9293

Copy link
Copy Markdown
Owner

Problema

semantic-release@25 include @semantic-release/npm@13 bundled, che richiede npm OIDC per l'autenticazione. Il package npm non ha OIDC configurato e il NPM_TOKEN non basta.

Fix

  • Revert semantic-release da ^25.0.3 a ^24.2.5
  • Rimossa dipendenza npm aggiunta nel fix precedente

Test

  • build: ✅ passato
  • 3 vuln dev-only rimaste (bundled npm di semantic-release) — non runtime

semantic-release@25 bundles @semantic-release/npm@13 which
requires npm OIDC authentication. semantic-release@24 uses
@semantic-release/npm@12 compatible with NPM_TOKEN secret.
@andrea9293
andrea9293 force-pushed the fix/revert-semantic-npm-v13 branch from 0fb6029 to 8d6b413 Compare June 4, 2026 21:05
@andrea9293
andrea9293 merged commit 7ffae1b into main Jun 4, 2026
3 checks passed
@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown

🎉 This PR is included in version 1.13.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant