Skip to content

IT-2623 Update npm-publish.yml workflow to use Trusted publishing#84

Open
lucirezac wants to merge 3 commits into
mainfrom
IT-2623_npm-trusted-publish
Open

IT-2623 Update npm-publish.yml workflow to use Trusted publishing#84
lucirezac wants to merge 3 commits into
mainfrom
IT-2623_npm-trusted-publish

Conversation

@lucirezac

Copy link
Copy Markdown

IT-2623

Objective

Replace NPM_TOKEN by NPM Trusted publishing, see: https://maptiler.atlassian.net/wiki/spaces/MAPTILER/pages/3761274898/Public+NPM+packages

Description

Workflow npm-publish.yml updated:

  • permissions required for OIDC added
  • NPM_TOKEN environment variable removed
  • actions version updated

Workflow publish-dry-run.yml updated:

  • NPM_TOKEN environment variable removed - NPM authentication not needed for dry run
  • actions version updated

GitHub Actions connection to NPMJS registry is already setup.

Acceptance

ACTION REQUIRED:
Please review, merge and test. In case of any issues, contact Infrastructure team.
NPM_TOKEN will expire Aug 24, 2026, after this date old authentication will no longer work.

Checklist

  • [] I have added relevant info to the CHANGELOG.md - workflow change, not relevant for changelog

@lucirezac lucirezac requested a review from lesbaa June 16, 2026 14:08
@lucirezac lucirezac self-assigned this Jun 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant