Skip to content

Migrate to trusted publishing #472

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
SHession merged 8 commits into from
Mar 26, 2026
+17 −7
Merged

Migrate to trusted publishing #472

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
4036f35
Bumps the Node version to 24
SHession Mar 25, 2026
c09ef42
Update CI to use trusted publishing
SHession Mar 25, 2026
49a904b
Addes no-op changeset to test release
SHession Mar 25, 2026
023b523
Add id-token write access to the release workflow
SHession Mar 26, 2026
673fd2e
Set changeset step param setupGitUser to false
SHession Mar 26, 2026
00110d8
Set up GitHub App token for changesets based on pan-domain-node example
SHession Mar 26, 2026
70e3556
Provide release job with necessary permissions
SHession Mar 26, 2026
91f82fc
Attempt simpler changeset setup with provided GITHUB_TOKEN
SHession Mar 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .changeset/five-buses-pay.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
---
"@guardian/prosemirror-elements": patch
---

no-op release to test migration to NPM trusted publishing
12 changes: 7 additions & 5 deletions .github/workflows/build-and-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,9 @@ on:

permissions:
contents: write
issues: write
pull-requests: write
id-token: write

jobs:
build:
Expand Down Expand Up @@ -50,10 +52,6 @@ jobs:
release:
runs-on: ubuntu-latest
needs: [build, integration-tests]
permissions:
contents: write
issues: write
pull-requests: write
if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/beta'
steps:
- uses: actions/checkout@v3
Expand All @@ -64,6 +62,11 @@ jobs:
node-version-file: .nvmrc
cache: "yarn"

# See https://docs.npmjs.com/trusted-publishers
# Find the latest version with `npm info npm@latest version`
- name: Install suitable NPM version for trusted publishing
run: npm install -g npm@11.12.0

- name: Install dependencies
run: yarn install --frozen-lockfile

Expand All @@ -79,4 +82,3 @@ jobs:
commit: "Bump package versions"
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
3 changes: 2 additions & 1 deletion .nvmrc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1,2 @@
22.15.0
24.14.1

4 changes: 3 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,9 @@
"version": "9.10.0",
"type": "module",
"main": "dist/cjs/index.js",
"repository": "github:guardian/prosemirror-elements",
"repository": {
"url": "git+https://github.com/guardian/prosemirror-elements.git"
},
"module": "dist/esm/index.js",
"types": "dist/declaration/index.d.ts",
"publishConfig": {
Expand Down
Loading