Skip to content

chore(release): switch to OIDC trusted publishing and bump to 1.0.0#28

Merged
mdesoto merged 1 commit intomainfrom
ci/oidc-trusted-publishing
Apr 14, 2026
Merged

chore(release): switch to OIDC trusted publishing and bump to 1.0.0#28
mdesoto merged 1 commit intomainfrom
ci/oidc-trusted-publishing

Conversation

@mdesoto
Copy link
Copy Markdown
Contributor

@mdesoto mdesoto commented Apr 14, 2026

Summary

  • Migrate npm publish workflow from NPM_TOKEN secret to OIDC trusted publishing (npm 11.5+ via Node 24.x)
  • Move permissions to workflow level, set NODE_AUTH_TOKEN: "" to force OIDC fallback
  • Bump actions/checkout and actions/setup-node to v6
  • Rename test workflow from npm-tests.yml to ci.yml
  • Remove Quarg platform and BurnerGuard service-mode references from README
  • Update LICENSE copyright to 2026 Flora Codex, LLC
  • Bump version to 1.0.0

Test plan

  • Verify CI workflow runs against Node 20.x, 22.x, 24.x matrix
  • Configure npm trusted publisher in npmjs.com package settings before first publish
  • Create a GitHub release to trigger publish workflow and confirm OIDC authentication works

🤖 Generated with Claude Code

Migrate npm publish workflow from NPM_TOKEN secret to OIDC trusted
publishing. Bump actions to v6, use Node 24.x for npm 11.5+ OIDC
support, rename test workflow to ci.yml, remove Quarg/service-mode
references from README, and update LICENSE copyright.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@mdesoto mdesoto merged commit e5580fa into main Apr 14, 2026
3 checks passed
@mdesoto mdesoto deleted the ci/oidc-trusted-publishing branch April 14, 2026 22:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant