ci: use GitHub OIDC for npm publish workflow#9

Merged

han4wluc merged 1 commit intomainfrom

Feb 13, 2026

Contributor

han4wluc commented Feb 13, 2026

Summary

switch npm publish auth from token secret to GitHub OIDC trusted publishing
add required workflow permissions (contents: read, id-token: write)
keep manual publish via workflow_dispatch
use actions/setup-node@v4

Notes

publishing now expects npm Trusted Publisher to be configured for this repo/workflow
publish command uses provenance and public access


          ci: switch npm publish to GitHub OIDC trusted publishing

968ec9b

han4wluc merged commit 5100321 into main

1 check passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet