Tags: PerryLink/dsh-github
Tags
fix(ci): publish on Node 24 so npm can perform the OIDC exchange Measured inside the publish step: ACTIONS_ID_TOKEN_REQUEST_URL and ACTIONS_ID_TOKEN_REQUEST_TOKEN are both present (so `id-token: write` works and there is no .npmrc interference), but `npm --version` reported 10.9.8 -- npm's trusted-publishing support landed in npm 11.5.1. Node 22 ships npm 10, so `npm publish` could never perform the exchange: it fails with ENEEDAUTH and the log has no /-/npm/v1/oidc/token/exchange request. The one repo whose `npm publish` does succeed runs node-version 24; the two that succeed via `pnpm publish` implement the exchange themselves and are unaffected by npm's version. Raising this job to Node 24 gives it npm 11+.
PreviousNext