From 97a6771dc4ae3839f2890c64fd330b7291a29f7a Mon Sep 17 00:00:00 2001 From: Matteo Collina Date: Fri, 22 Aug 2025 18:15:19 +0200 Subject: [PATCH] Drop npm token, use OIDC instead Signed-off-by: Matteo Collina --- .github/workflows/release.yml | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5f71d450a90..9263ee28214 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -52,19 +52,15 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-node@v4 with: - node-version: '20' + node-version: '22' registry-url: 'https://registry.npmjs.org' - run: npm install -g npm@latest - run: npm install - name: Create NPM release - run: npm publish --provenance --access public - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} + run: npm publish --access public - run: node scripts/generate-undici-types-package-json.js - - run: npm publish --provenance + - run: npm publish working-directory: './types' - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} - name: Create GitHub release uses: actions/github-script@v7 with: