Skip to content

fix: upgrade to actions v6 and remove NODE_AUTH_TOKEN for OIDC#41

Merged
toiroakr merged 1 commit into
mainfrom
fix/trusted-publish-verify-v2
Apr 7, 2026
Merged

fix: upgrade to actions v6 and remove NODE_AUTH_TOKEN for OIDC#41
toiroakr merged 1 commit into
mainfrom
fix/trusted-publish-verify-v2

Conversation

@toiroakr
Copy link
Copy Markdown
Owner

@toiroakr toiroakr commented Apr 7, 2026

Summary

  • Upgrade actions/checkout and actions/setup-node from v4 to v6 (Node 24 support)
  • Remove NODE_AUTH_TOKEN: "" which was incorrectly blocking OIDC authentication

Background

The Node.js 20 deprecation warning indicated the actions were running on an older Node runtime. Additionally, setting NODE_AUTH_TOKEN: "" actually prevents OIDC from working because npm attempts to use the empty token instead of OIDC.

References:

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 7, 2026

Coverage Summary

File               | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s 
-------------------|---------|----------|---------|---------|-------------------
All files          |   70.89 |    57.74 |      40 |   70.89 |                   
 zod-empty         |       0 |        0 |       0 |       0 |                   
  tsdown.config.ts |       0 |        0 |       0 |       0 | 1-9               
 ...-hook-form/src |       0 |        0 |       0 |       0 |                   
  App.tsx          |       0 |        0 |       0 |       0 | 1-38              
  main.tsx         |       0 |        0 |       0 |       0 | 1-10              
 zod-empty/src     |   82.97 |    58.99 |     100 |   82.97 |                   
  index.ts         |   82.97 |    58.99 |     100 |   82.97 | ...62,364,366-372 
-------------------|---------|----------|---------|---------|-------------------

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented Apr 7, 2026

Open in StackBlitz

npm i https://pkg.pr.new/zod-empty@41

commit: 25b12f1

@toiroakr toiroakr merged commit 1be270b into main Apr 7, 2026
5 checks passed
@toiroakr toiroakr deleted the fix/trusted-publish-verify-v2 branch April 7, 2026 13:06
github-actions Bot pushed a commit that referenced this pull request Apr 7, 2026
# [2.1.0](v2.0.0...v2.1.0) (2026-04-07)

### Bug Fixes

* clear NODE_AUTH_TOKEN for OIDC trusted publishing ([a524cd1](a524cd1))
* clear NODE_AUTH_TOKEN for OIDC trusted publishing ([#40](#40)) ([c10a555](c10a555))
* remove registry-url to enable OIDC trusted publishing ([c96a381](c96a381))
* remove registry-url to enable OIDC trusted publishing ([#39](#39)) ([2d179f1](2d179f1))
* skip npm verifyConditions for trusted publishing ([311f0bd](311f0bd))
* skip npm verifyConditions for trusted publishing ([#37](#37)) ([3424393](3424393))
* upgrade @semantic-release/npm to v13 for OIDC support ([9c386d2](9c386d2))
* upgrade @semantic-release/npm to v13 for OIDC trusted publishing ([#38](#38)) ([e78a7c2](e78a7c2))
* upgrade semantic-release to v25 for OIDC support ([5fe3d1c](5fe3d1c))
* upgrade semantic-release to v25 for OIDC support ([#42](#42)) ([be89c10](be89c10))
* upgrade to actions v6 and remove NODE_AUTH_TOKEN ([25b12f1](25b12f1))
* upgrade to actions v6 and remove NODE_AUTH_TOKEN for OIDC ([#41](#41)) ([1be270b](1be270b))

### Features

* add support for TypeScript 6 in peerDependencies ([e806055](e806055))
* add TypeScript 6 support ([#35](#35)) ([f63be85](f63be85))
* upgrade devDependencies TypeScript to 6.0.2 ([0aa90f9](0aa90f9))
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 7, 2026

🎉 This PR is included in version 2.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant