Fix npm trusted publishing runtime and refresh prerelease tag#9
Merged
Fix npm trusted publishing runtime and refresh prerelease tag#9
Conversation
The publish workflow was running Node 22.22.1 with npm 10.9.4, which is below npm's current trusted publishing requirement. Upgrade the publish job to Node 24, install the latest npm explicitly, and bump the prerelease version to 0.1.35-rc.1 for a fresh release-path validation. Constraint: Existing release tag v0.1.35-rc.0 cannot be reused after a failed publish attempt Rejected: Keep Node 22 only | GitHub runner image currently bundles npm 10.9.4 in that lane Rejected: Retry the same release again | reruns keep the old workflow definition and package version Confidence: high Scope-risk: narrow Reversibility: clean Directive: Keep runtime version output in the publish job until OIDC publishing is stable across releases Tested: npm run build; npm test; npm pack --dry-run Not-tested: End-to-end GitHub Release triggered npm publish via OIDC until merged and released from main
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
0.1.35-rc.1Validation
npm run buildnpm testMaintainer Notes
v0.1.35-rc.0failed because the publish job ran npm10.9.4.11.5.1+; this PR updates the workflow accordingly.v0.1.35-rc.1frommain.