Skip to content

chore: npm Trusted Publishing (Node 24) + 0.6.1 republish - #39

Merged
jlc488 merged 1 commit into
mainfrom
chore/npm-trusted-publishing
Nov 8, 2026
Merged

jlc488 merged 1 commit into
mainfrom
chore/npm-trusted-publishing

Conversation

@jlc488

@jlc488 jlc488 commented Nov 8, 2026

Copy link
Copy Markdown
Contributor

Switches publish.yml from NPM_TOKEN to npm Trusted Publishing (OIDC) on Node 24 (Node 22's npm 10 cannot exchange the OIDC token — numkey's first attempt failed with E404 PUT). 0.6.1 is a docs-only republish that validates the connection registered on npm for devslab-kr/kokey · publish.yml. Browser extension version track untouched.

Local npm run verify green (117 tests, build). After merge: gh workflow run publish.yml -f version=v0.6.1.

/ npm 발행을 토큰에서 Trusted Publishing(OIDC)으로, Node 24로. 0.6.1은 연결 검증용 재배포.

publish.yml drops NODE_AUTH_TOKEN so npm publish authenticates with the OIDC token (id-token: write already granted) and runs on Node 24, because Node 22's npm 10 cannot exchange that token (npm >= 11.5.1 required; numkey hit E404 on exactly this). 0.6.1 is a docs-only republish that validates the trusted publisher connection. The browser extension's own version track is untouched.
@jlc488
jlc488 merged commit 4d6854e into main Nov 8, 2026
1 check passed
@jlc488
jlc488 deleted the chore/npm-trusted-publishing branch November 8, 2026 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant