this repo has no description
ci: update deployment workflow to use npm trusted publishers (#950)
authored by
Pete Bacon Darwin
and committed by
GitHub
e0456c56
e3aba83f
+14
-3
+6
-2
.github/actions/install-dependencies/action.yml
+6
-2
.github/actions/install-dependencies/action.yml
···
1
1
name: "Install Dependencies"
2
2
description: "Install dependencies, fetching from cache when possible"
3
+
inputs:
4
+
node-version:
5
+
description: the version of Node.js to install
6
+
default: 20.18.0
3
7
4
8
runs:
5
9
using: "composite"
···
9
13
with:
10
14
version: 9
11
15
12
-
- name: Install Node.js
16
+
- name: Install Node.js ${{ inputs.node-version }}
13
17
uses: actions/setup-node@v4
14
18
with:
15
-
node-version: 20.18.0
19
+
node-version: ${{ inputs.node-version }}
16
20
cache: "pnpm"
17
21
registry-url: "https://registry.npmjs.org"
18
22
+8
-1
.github/workflows/changesets.yml
+8
-1
.github/workflows/changesets.yml
···
5
5
branches:
6
6
- main
7
7
8
+
permissions:
9
+
id-token: write
10
+
contents: read
11
+
8
12
jobs:
9
13
release:
10
14
if: ${{ github.repository_owner == 'opennextjs' }}
···
20
24
21
25
- name: Install Dependencies
22
26
uses: ./.github/actions/install-dependencies
27
+
with:
28
+
# Needs 24 to get a version of npm that can handle trusted publishers
29
+
# See https://docs.npmjs.com/trusted-publishers
30
+
node-version: 24
23
31
24
32
- name: Build Cloudflare package
25
33
run: pnpm run build
···
31
39
publish: pnpm exec changeset publish
32
40
env:
33
41
GITHUB_TOKEN: ${{ secrets.GH_ACCESS_TOKEN }}
34
-
NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
35
42
NODE_ENV: "production"