Skip to content

Conversation

@jonathonherbert
Copy link
Collaborator

@jonathonherbert jonathonherbert commented Jan 29, 2026

What does this change?

Sets this repo up for trusted publishing —

  • removes the NPM_TOKEN
  • adds id-token to the workflow permissions for the job that contains the publish step
  • bumps NPM to > 11.5.1

How to test

Merge, and attempt to re-run the publish action that currently fails on main. It should succeed.

@github-actions
Copy link
Contributor

github-actions bot commented Jan 29, 2026

@github-actions
Copy link
Contributor

github-actions bot commented Jan 29, 2026

@jonathonherbert jonathonherbert self-assigned this Jan 29, 2026
@jonathonherbert jonathonherbert added the maintenance Departmental tracking: maintenance work, not a fix or a feature label Jan 29, 2026
@jonathonherbert jonathonherbert added this to the Health milestone Jan 29, 2026
@jonathonherbert jonathonherbert merged commit 8200dcf into main Jan 30, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

maintenance Departmental tracking: maintenance work, not a fix or a feature

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants