From 677dd7fe4d4dc4758a57ffee698fe4365a38e13e Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Sun, 12 Apr 2026 13:43:01 +0000
Subject: [PATCH] fix: update Node to 20.x and upgrade npm for trusted
 publishing support

Node 16 ships with npm 8.x which doesn't support npm trusted publishing
(OIDC provenance), requiring npm 9.5+. This updates the GitHub Action to
use actions/setup-node@v4 with Node 20.x and adds an npm upgrade step,
matching the pattern already used in .github/workflows/maven.yml.

https://claude.ai/code/session_013qz1NYPTSvpAWsjdDXZqLk
---
 action.yml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/action.yml b/action.yml
index 138f1b61..24b059df 100644
--- a/action.yml
+++ b/action.yml
@@ -117,11 +117,16 @@ runs:
         git config user.email "<>"
     - name: Set up Node
       if: ${{ env.JDEPLOY_SKIP_EXECUTION != 'true' }}
-      uses: actions/setup-node@v2
+      uses: actions/setup-node@v4
       with:
-        node-version: '16.x'
+        node-version: '20.x'
         registry-url: 'https://registry.npmjs.org'
 
+    - name: Upgrade npm for trusted publishing
+      if: ${{ env.JDEPLOY_SKIP_EXECUTION != 'true' }}
+      run: npm install -g npm@latest
+      shell: bash
+
     - name: Setup jDeploy Registry
       if: ${{ env.JDEPLOY_SKIP_EXECUTION != 'true' }}
       shell: bash