From 52bc336c35c2bd5bf6ce910679a4c23f5ff588b6 Mon Sep 17 00:00:00 2001 From: David Momenso Date: Sun, 19 Apr 2026 11:06:01 -0300 Subject: [PATCH] Update npm publish workflow to use latest actions and add provenance flag --- .github/workflows/npm-publish.yml | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index 882d87f..3184725 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -5,13 +5,17 @@ on: jobs: build: runs-on: ubuntu-latest + permissions: + contents: read + id-token: write steps: - - uses: actions/checkout@v3 - - uses: actions/setup-node@v3 + - uses: actions/checkout@v4 + - uses: actions/setup-node@v4 with: node-version: "20.x" registry-url: "https://registry.npmjs.org" - run: npm ci - - run: npm publish + - run: npm test + - run: npm publish --provenance env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}