@ludeo/cloud-common 1.2.264-beta-yahil-1 → 1.2.266

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -28,7 +28,7 @@ jobs:
28
28
  uses: actions/setup-node@v4
29
29
  with:
30
30
  node-version: "20"
31
- registry-url: 'https://registry.npmjs.org/'
31
+ registry-url: "https://registry.npmjs.org/"
32
32
 
33
33
  - name: 🔐 Login to Ludeo NPM
34
34
  run: |
@@ -68,8 +68,9 @@ jobs:
68
68
  publish:
69
69
  if: github.ref == 'refs/heads/develop'
70
70
  runs-on: ubuntu-latest
71
- env:
72
- NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
71
+ permissions:
72
+ id-token: write
73
+ contents: write
73
74
 
74
75
  steps:
75
76
  - name: Checkout code
@@ -79,7 +80,18 @@ jobs:
79
80
  uses: actions/setup-node@v4
80
81
  with:
81
82
  node-version: "20"
82
- registry-url: 'https://registry.npmjs.org/'
83
+ registry-url: "https://registry.npmjs.org/"
84
+
85
+ # Trusted publishing requires npm >= 11.5.1 to perform the OIDC token exchange.
86
+ # Node 20 ships with npm 10.x, so upgrade explicitly.
87
+ - name: Upgrade npm for trusted publishing
88
+ run: npm install -g npm@latest
89
+
90
+ # Token still needed to install private @ludeo/* dependencies from the registry.
91
+ # Publishing itself uses OIDC trusted publishing (no token).
92
+ - name: 🔐 Login to Ludeo NPM (install only)
93
+ run: |
94
+ npm config set @ludeo:registry https://registry.npmjs.org/ && npm config set '//registry.npmjs.org/:_authToken' ${{ secrets.NPM_TOKEN }}
83
95
 
84
96
  - name: 🏗️ Install dependencies
85
97
  run: npm install
@@ -87,8 +99,10 @@ jobs:
87
99
  - name: 🛠 Run build 🛠️
88
100
  run: npm run build
89
101
 
90
- - name: 🏗️ Install jq
91
- run: sudo apt-get install -y jq
102
+ # Drop any token from the user-level .npmrc so npm publish performs the OIDC exchange
103
+ # against the npm registry instead of using the install token.
104
+ - name: Clear npm auth token before publish
105
+ run: npm config delete //registry.npmjs.org/:_authToken
92
106
 
93
107
  - name: 📦 Publish to npm
94
108
  run: npm publish