feat: update repos (#1290)

* feat: update repos

* chore: update version

* ci: switch to gar

Author: aaron-steinfeld

.github/workflows/build-and-test.yml

@@ -6,7 +6,7 @@ on:
       - main
 jobs:
   build:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out code
         uses: actions/checkout@v4
@@ -23,7 +23,7 @@ jobs:
       - name: Build
         run: npm run build:ci
   test:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out code
         uses: actions/checkout@v4

.github/workflows/publish.yml

@@ -5,7 +5,12 @@ on:
       - main
 jobs:
   publish:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: 'write'
+      id-token: 'write'
+      issues: 'write'
+      pull-requests: 'write'
     steps:
       - name: Check out code
         uses: actions/checkout@v4
@@ -22,10 +27,16 @@ jobs:
       - name: Build
         run: npm run build:ci
 
+      - uses: google-github-actions/auth@v2
+        id: auth
+        with:
+          token_format: access_token
+          workload_identity_provider: projects/1030413944741/locations/global/workloadIdentityPools/github-pool/providers/github-provider
+          service_account: github-publisher@hypertrace-repos.iam.gserviceaccount.com
+
       - name: Publish
         run: npm run semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_USERNAME: ${{ secrets.NPM_USERNAME }}
-          NPM_PASSWORD: ${{ secrets.NPM_PASSWORD }}
-          NPM_EMAIL: ${{ secrets.NPM_EMAIL }}
+          NPM_TOKEN: ${{ steps.auth.outputs.access_token }}
+          NPM_CONFIG_REGISTRY: ${{ secrets.GAR_NPM_PUBLISH_REGISTRY }}

.npmrc

@@ -1 +1 @@
-@hypertrace:registry=https://hypertrace.jfrog.io/artifactory/api/npm/npm/
+@hypertrace:registry=https://us-npm.pkg.dev/hypertrace-repos/npm

package-lock.json

@@ -23,7 +23,7 @@
     "@angular/forms": "^19.0.5",
     "@angular/platform-browser": "^19.0.5",
     "@angular/platform-browser-dynamic": "^19.0.5",
-    "@hypertrace/hyperdash": "^1.3.0",
+    "@hypertrace/hyperdash": "^1.4.1",
     "@typescript-eslint/utils": "^8.33.0",
     "core-js": "^3.43.0",
     "lodash-es": "^4.17.21",
@@ -94,9 +94,6 @@
     "type": "git",
     "url": "git@github.com:hypertrace/hyperdash-angular.git"
   },
-  "publishConfig": {
-    "registry": "https://hypertrace.jfrog.io/artifactory/api/npm/npm/"
-  },
   "release": {
     "branches": [
       "main"