ci: npm OIDC release workflow (ported from terra-react); fix malformed packageManager#6
Merged
Conversation
…ormed packageManager The packageManager field '^yarn@1.22.15' is invalid (bad semver prefix) and modern yarn 1.22.x hard-refuses to run against it — this is what has been failing CI since the runner image bumped yarn. Publish runs the bob build explicitly because npm publish uses --ignore-scripts and there is no prepare script.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
release_package.yml, ported from terra-react: publishesreact-native-terra-rt-reactto npm via trusted publishing (OIDC) — no stored token. Triggered by a GitHub Release, or workflow_dispatch (used by the newbump-terra-rt-reactworkflows in TerraRTAndroidPackage/TerraRTiOSPackage). The bob build runs explicitly because publish uses--ignore-scriptsand this package has nopreparescript."packageManager": "^yarn@1.22.15"is malformed (bad semver prefix) and the yarn 1.22.x on current runner images hard-refuses to run against it — every CI job has failed on this since at least Sep 2025. Corrected toyarn@1.22.22.Testing
yarn install --frozen-lockfile+yarn prepackverified locally after the fix (lib/commonjs, lib/module, lib/typescript built).Manual step before first publish
Add a Trusted Publisher on npmjs.com for
react-native-terra-rt-react: orgtryterra, repoterra-rt-react, workflowrelease_package.yml(mirror of terra-react's config).