Skip to content

fix: upgrade semantic-release to v25 for OIDC support#42

Merged
toiroakr merged 1 commit into
mainfrom
fix/trusted-publish-verify-v2
Apr 7, 2026
Merged

fix: upgrade semantic-release to v25 for OIDC support#42
toiroakr merged 1 commit into
mainfrom
fix/trusted-publish-verify-v2

Conversation

@toiroakr
Copy link
Copy Markdown
Owner

@toiroakr toiroakr commented Apr 7, 2026

Summary

  • Upgrade semantic-release from v24 to v25
  • v24 bundled @semantic-release/npm v12 which does not support OIDC
  • v25 bundles @semantic-release/npm v13 which has OIDC trusted publishing support

Root Cause

The previous failures showed "No npm token specified" because semantic-release@24.2.1 was using its bundled @semantic-release/npm@12.0.2 (OIDC unsupported) instead of the explicitly installed v13.1.5.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 7, 2026

Coverage Summary

File               | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s 
-------------------|---------|----------|---------|---------|-------------------
All files          |   70.89 |    57.74 |      40 |   70.89 |                   
 zod-empty         |       0 |        0 |       0 |       0 |                   
  tsdown.config.ts |       0 |        0 |       0 |       0 | 1-9               
 ...-hook-form/src |       0 |        0 |       0 |       0 |                   
  App.tsx          |       0 |        0 |       0 |       0 | 1-38              
  main.tsx         |       0 |        0 |       0 |       0 | 1-10              
 zod-empty/src     |   82.97 |    58.99 |     100 |   82.97 |                   
  index.ts         |   82.97 |    58.99 |     100 |   82.97 | ...62,364,366-372 
-------------------|---------|----------|---------|---------|-------------------

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented Apr 7, 2026

Open in StackBlitz

npm i https://pkg.pr.new/zod-empty@42

commit: 5fe3d1c

@toiroakr toiroakr merged commit be89c10 into main Apr 7, 2026
5 checks passed
@toiroakr toiroakr deleted the fix/trusted-publish-verify-v2 branch April 7, 2026 13:11
github-actions Bot pushed a commit that referenced this pull request Apr 7, 2026
# [2.1.0](v2.0.0...v2.1.0) (2026-04-07)

### Bug Fixes

* clear NODE_AUTH_TOKEN for OIDC trusted publishing ([a524cd1](a524cd1))
* clear NODE_AUTH_TOKEN for OIDC trusted publishing ([#40](#40)) ([c10a555](c10a555))
* remove registry-url to enable OIDC trusted publishing ([c96a381](c96a381))
* remove registry-url to enable OIDC trusted publishing ([#39](#39)) ([2d179f1](2d179f1))
* skip npm verifyConditions for trusted publishing ([311f0bd](311f0bd))
* skip npm verifyConditions for trusted publishing ([#37](#37)) ([3424393](3424393))
* upgrade @semantic-release/npm to v13 for OIDC support ([9c386d2](9c386d2))
* upgrade @semantic-release/npm to v13 for OIDC trusted publishing ([#38](#38)) ([e78a7c2](e78a7c2))
* upgrade semantic-release to v25 for OIDC support ([5fe3d1c](5fe3d1c))
* upgrade semantic-release to v25 for OIDC support ([#42](#42)) ([be89c10](be89c10))
* upgrade to actions v6 and remove NODE_AUTH_TOKEN ([25b12f1](25b12f1))
* upgrade to actions v6 and remove NODE_AUTH_TOKEN for OIDC ([#41](#41)) ([1be270b](1be270b))

### Features

* add support for TypeScript 6 in peerDependencies ([e806055](e806055))
* add TypeScript 6 support ([#35](#35)) ([f63be85](f63be85))
* upgrade devDependencies TypeScript to 6.0.2 ([0aa90f9](0aa90f9))
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 7, 2026

🎉 This PR is included in version 2.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant