From 2d37ab1b5ce029d90b65697722451596ed0670fd Mon Sep 17 00:00:00 2001 From: Amp Date: Wed, 21 Oct 2026 23:48:34 +0000 Subject: [PATCH] chore(release): use npm trusted publishing for scip-python releases The release job has no NPM_TOKEN secret, so npm publish fails with ENEEDAUTH and the Docker image is never pushed. Publish with npm trusted publishing (OIDC) like scip-typescript (#511, #514). Node 24 ships npm 11, which trusted publishing requires. Amp-Thread-ID: https://ampcode.com/threads/T-01a16041-ef1e-774a-957e-9f7122a62a0e Co-authored-by: Amp --- .github/workflows/scip-release.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/scip-release.yml b/.github/workflows/scip-release.yml index ab65d8b52..36a7ecf62 100644 --- a/.github/workflows/scip-release.yml +++ b/.github/workflows/scip-release.yml @@ -8,18 +8,18 @@ on: jobs: release-image: runs-on: ubuntu-latest + permissions: + contents: read + id-token: write # npm trusted publishing (OIDC) steps: - uses: actions/checkout@v3 - uses: docker/setup-buildx-action@v2 - uses: actions/setup-node@v2 with: - node-version: '16' - registry-url: 'https://registry.npmjs.org' + node-version: 24 - run: npm install - run: cd ./packages/pyright-scip/ && npm install && npm run build - run: cd ./packages/pyright-scip/ && npm publish --access public - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} - name: Login to DockerHub uses: docker/login-action@v2 with: