Commit abe5e34
authored
chore: Move to OIDC authentication for NPM publishing. (#1009)
This PR moves to OIDC publishing from using token based authentication.
The OIDC integration between npmjs and github only supports a single
workflow to publish from. Previously we used two publishing workflows
depending on if it was an automated release or manual. Now that we are
limited to a single workflow we have to combine these two operations,
and that combination constitutes the majority of the changes.
I ran a pre-pre-release of @launchdarkly/js-client-sdk from the
`rlamb/test-oidc` branch.
The run can be seen here:
https://github.com/launchdarkly/js-core/actions/runs/19478232676/job/55743422983
<!-- CURSOR_SUMMARY -->
---
> [!NOTE]
> Consolidates automated and manual publishing into a single
release-please workflow, switches npm publishing to OIDC, centralizes
Node setup, and updates docs.
>
> - **CI/Workflows**:
> - Merge manual publishing into `./github/workflows/release-please.yml`
via `workflow_dispatch` (adds inputs, prerelease/dry-run) and remove
`manual-publish.yml`.
> - Gate jobs by event type; keep release-* jobs for push-triggered
releases.
> - **Actions**:
> - Add `actions/setup-release-node` composite to standardize Node 24
and npm 11.6.2.
> - Use `setup-release-node` in `actions/full-release` and workflow
jobs; remove per-job `setup-node` steps.
> - Shift npm auth to OIDC; drop token/yarnrc setup from
`actions/full-release`.
> - Keep `publish-jsr` and `publish` steps; manual job supports
Redis/DynamoDB setup when needed.
> - **Docs**:
> - Update `contributing/publishing.md` to describe the unified workflow
and manual/automated paths; adjust references to `release-please.yml`.
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
7860383. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->1 parent c9c4f95 commit abe5e34
File tree
5 files changed
+155
-229
lines changed- .github/workflows
- actions
- full-release
- setup-release-node
- contributing
5 files changed
+155
-229
lines changedThis file was deleted.
0 commit comments