From 709634f4b70e436bd06aaea173a8515ff6228699 Mon Sep 17 00:00:00 2001 From: indexzero Date: Mon, 16 Mar 2026 02:10:03 -0400 Subject: [PATCH] ci: fix npm Trusted Publishers (OIDC) for provenance publishing - Add registry-url to setup-node so npm can perform the OIDC handshake - Use NPM_CONFIG_PROVENANCE env var instead of --provenance CLI flag (changesets/cli does not forward unknown flags to npm publish) Co-Authored-By: Claude Opus 4.6 --- .github/workflows/release.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 14850b4..a04f71e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -29,6 +29,7 @@ jobs: with: node-version: 22 cache: 'pnpm' + registry-url: 'https://registry.npmjs.org' - name: Install Dependencies run: pnpm install --frozen-lockfile @@ -37,6 +38,7 @@ jobs: id: changesets uses: changesets/action@v1 with: - publish: pnpm changeset publish --provenance + publish: pnpm changeset publish env: GITHUB_TOKEN: ${{ secrets.GH_TOKEN || secrets.GITHUB_TOKEN }} + NPM_CONFIG_PROVENANCE: true