From c60e25a3f19becffd0c62af772de4c6a9809dd22 Mon Sep 17 00:00:00 2001 From: Jonathon Herbert Date: Fri, 30 Jan 2026 12:39:03 +0000 Subject: [PATCH 1/5] Bump Node to 24.13.0 As trusted-publishing needs the latest version of npm, which is pulled in alongside node --- .nvmrc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.nvmrc b/.nvmrc index 3d325430..3fe3b157 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -20.8.0 +24.13.0 From 56b738f457b3d2f1616493ea1f56427421b3f70c Mon Sep 17 00:00:00 2001 From: Jonathon Herbert Date: Fri, 30 Jan 2026 12:39:54 +0000 Subject: [PATCH 2/5] Bump setup-node to v6 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 201ecc1e..51692d0a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -25,7 +25,7 @@ jobs: java-version: 11 cache: sbt - uses: sbt/setup-sbt@v1.1.0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: .nvmrc registry-url: https://registry.npmjs.org From 2c92f676cda5433096b014a9af77005cc8aca70b Mon Sep 17 00:00:00 2001 From: Jonathon Herbert Date: Fri, 30 Jan 2026 12:40:40 +0000 Subject: [PATCH 3/5] Remove NODE_AUTH_TOKEN --- .github/workflows/release.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 51692d0a..7806ac94 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -33,5 +33,4 @@ jobs: run: | sbt "project typescript" "releaseNpm ${{ needs.scala-maven-release.outputs.RELEASE_VERSION }}" env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} RELEASE_TYPE: ${{ needs.scala-maven-release.outputs.RELEASE_TYPE }} From b1661c2c286b656f4aab4c2e89ad2b7fc9347e0b Mon Sep 17 00:00:00 2001 From: Jonathon Herbert Date: Fri, 30 Jan 2026 12:41:39 +0000 Subject: [PATCH 4/5] Add id-token:write permissions to release step --- .github/workflows/release.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7806ac94..d3134539 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -17,6 +17,8 @@ jobs: name: NPM Release needs: scala-maven-release runs-on: ubuntu-latest + permissions: + id-token: write steps: - uses: actions/checkout@v4 - uses: actions/setup-java@v4 From 85c89c298a416a1722efb209d6d3abc572bd2e4d Mon Sep 17 00:00:00 2001 From: Jonathon Herbert Date: Fri, 30 Jan 2026 14:40:49 +0000 Subject: [PATCH 5/5] Add scmInfo to root project --- build.sbt | 1 + 1 file changed, 1 insertion(+) diff --git a/build.sbt b/build.sbt index c8c5869c..b7e770f8 100644 --- a/build.sbt +++ b/build.sbt @@ -33,6 +33,7 @@ lazy val artifactProductionSettings = Seq( crossScalaVersions := Seq("2.12.18", scalaVersion.value), organization := "com.gu", licenses := Seq("Apache v2" -> url("http://www.apache.org/licenses/LICENSE-2.0.html")), + scmInfo := Some(ScmInfo(url("https://github.com/guardian/content-api-models"), "scm:git@github.com:guardian/content-api-models.git")), resolvers ++= Resolver.sonatypeOssRepos("public"), Test / testOptions += Tests.Argument(TestFrameworks.ScalaTest, "-u", s"test-results/scala-${scalaVersion.value}", "-o")