From f06eb7e29bc39c74dfafd9e98d0c813290c15221 Mon Sep 17 00:00:00 2001 From: Alexandre Asselin Date: Thu, 23 Oct 2025 10:05:29 -0400 Subject: [PATCH 1/2] Modify changeset workflow permissions and env vars Updated permissions comment for id-token and removed NPM_TOKEN environment variable. --- .github/workflows/changeset.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/changeset.yml b/.github/workflows/changeset.yml index 860cd7d86..87514f507 100644 --- a/.github/workflows/changeset.yml +++ b/.github/workflows/changeset.yml @@ -9,7 +9,7 @@ jobs: name: Release runs-on: ubuntu-latest permissions: - id-token: write # required for provenance https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions + id-token: write # OIDC for npm Trusted Publishing contents: write pull-requests: write steps: @@ -46,5 +46,4 @@ jobs: # This expects you to have a script called release which does a build for your packages and calls changeset publish publish: npm run release env: - NPM_TOKEN: ${{ secrets.WORKLEAP_NPM_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 83e66c3bb163ea8218a56af2abe579593fdc4191 Mon Sep 17 00:00:00 2001 From: Alexandre Asselin Date: Thu, 23 Oct 2025 10:06:57 -0400 Subject: [PATCH 2/2] Update version for OIDC publish testing Bump version for OIDC publish testing. --- .changeset/giant-buttons-visit.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/giant-buttons-visit.md diff --git a/.changeset/giant-buttons-visit.md b/.changeset/giant-buttons-visit.md new file mode 100644 index 000000000..9fb5e87ee --- /dev/null +++ b/.changeset/giant-buttons-visit.md @@ -0,0 +1,5 @@ +--- +"@workleap/orbiter-ui": patch +--- + +Bump to test OIDC publish