Skip to content

Use OIDC For NPM Pubish #1700

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
alistair-singh merged 12 commits into from
Feb 5, 2026
+32 −23
Merged

Use OIDC For NPM Pubish #1700

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
1d5f4b0
use OICD
alistair-singh Feb 5, 2026
7179f78
re-order
alistair-singh Feb 5, 2026
65f3914
cd
alistair-singh Feb 5, 2026
a3c8ce0
cd
alistair-singh Feb 5, 2026
85c1b14
re-order
alistair-singh Feb 5, 2026
da0da77
remove npmrc
alistair-singh Feb 5, 2026
dc7e901
debug
alistair-singh Feb 5, 2026
48b5d11
update node
alistair-singh Feb 5, 2026
f96ed35
more debug
alistair-singh Feb 5, 2026
58a5dd3
more debug
alistair-singh Feb 5, 2026
aa3850d
tag latest
alistair-singh Feb 5, 2026
5ba732e
enable tag write and release creation
alistair-singh Feb 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
51 changes: 32 additions & 19 deletions .github/workflows/npm-publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,9 @@ on:
required: false
type: "string"

env:
NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
permissions:
id-token: write
contents: write

jobs:
publish:
Expand All @@ -26,6 +27,19 @@ jobs:
- name: Install Foundry
uses: foundry-rs/foundry-toolchain@v1

- name: Install pnpm
uses: pnpm/action-setup@v4
with:
version: 10

- name: Install Node.js
uses: actions/setup-node@v6
with:
node-version: "24"
cache-dependency-path: web
cache: "pnpm"
registry-url: "https://registry.npmjs.org"

- name: Install dependencies
working-directory: contracts
run: |
Expand All @@ -44,21 +58,10 @@ jobs:
working-directory: contracts
run: forge test

- name: Install Node.js
uses: actions/setup-node@v4
with:
node-version: "20.x"
registry-url: "https://registry.npmjs.org"

- name: Install pnpm
uses: pnpm/action-setup@v3
with:
version: 8

- name: Build
working-directory: web
run: |
pnpm install
pnpm install --frozen-lockfile
pnpm build

- name: Configure Git
Expand Down Expand Up @@ -105,28 +108,38 @@ jobs:

- name: Publish Base Types
working-directory: web/packages/base-types
env:
NODE_AUTH_TOKEN: ''
run: |
pnpm publish --no-git-checks --access public
pnpm publish --no-git-checks --access public --tag latest

- name: Publish Contracts
working-directory: web/packages/contracts
env:
NODE_AUTH_TOKEN: ''
run: |
pnpm publish --no-git-checks --access public
pnpm publish --no-git-checks --access public --tag latest

- name: Publish Contract Types
working-directory: web/packages/contract-types
env:
NODE_AUTH_TOKEN: ''
run: |
pnpm publish --no-git-checks --access public
pnpm publish --no-git-checks --access public --tag latest

- name: Publish API
working-directory: web/packages/api
env:
NODE_AUTH_TOKEN: ''
run: |
pnpm publish --no-git-checks --access public
pnpm publish --no-git-checks --access public --tag latest

- name: Publish Registry
working-directory: web/packages/registry
env:
NODE_AUTH_TOKEN: ''
run: |
pnpm publish --no-git-checks --access public
pnpm publish --no-git-checks --access public --tag latest

- name: Create new tag
id: create_tag
Expand Down
4 changes: 0 additions & 4 deletions web/.npmrc
View file
Open in desktop

This file was deleted.

Loading