Skip to content

Update release workflow for OIDC#3500

Merged
delucis merged 2 commits intomainfrom
chris/oidc
Oct 31, 2025
Merged

Update release workflow for OIDC#3500
delucis merged 2 commits intomainfrom
chris/oidc

Conversation

@delucis
Copy link
Copy Markdown
Member

@delucis delucis commented Oct 23, 2025

Description

  • This PR updates our workflow for releasing packages to npm to use OIDC trusted publishing
  • While there I also locked down some security by removing some permissions that weren’t required
  • The weird NPM_TOKEN: "" line is a workaround for changesets to support OIDC publishing

@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Oct 23, 2025

🦋 Changeset detected

Latest commit: 12eae86

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 4 packages
Name Type
@astrojs/starlight-docsearch Patch
@astrojs/starlight-markdoc Patch
@astrojs/starlight Patch
@astrojs/starlight-tailwind Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@netlify
Copy link
Copy Markdown

netlify bot commented Oct 23, 2025

Deploy Preview for astro-starlight ready!

Name Link
🔨 Latest commit 12eae86
🔍 Latest deploy log https://app.netlify.com/projects/astro-starlight/deploys/68fa2a8b29e15b0008ac1d8e
😎 Deploy Preview https://deploy-preview-3500--astro-starlight.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 100 (no change from production)
Accessibility: 100 (no change from production)
Best Practices: 100 (no change from production)
SEO: 100 (no change from production)
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@github-actions github-actions bot added the 🚨 action Changes to GitHub Action workflows label Oct 23, 2025
@astrobot-houston
Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size
/index.html 7.3 KB (0%)
/_astro/*.js 25.76 KB (0%)
/_astro/*.css 14.29 KB (0%)

Copy link
Copy Markdown
Member

@HiDeoo HiDeoo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks perfect to me, and love the global patch bump to verify/notify about the change 👍

Can be merged whenever the npmjs side of the changes are done.

@delucis delucis merged commit 7700456 into main Oct 31, 2025
16 checks passed
@delucis delucis deleted the chris/oidc branch October 31, 2025 14:26
@astrobot-houston astrobot-houston mentioned this pull request Oct 31, 2025
HiDeoo added a commit to HiDeoo/starlight that referenced this pull request Nov 5, 2025
* main: (47 commits)
  feat: add some of trueberryless' new Starlight blogs to community content (withastro#3525)
  i18n(fr): update `resources/themes` (withastro#3526)
  Fix file filters added in withastro#3520 (withastro#3522)
  i18n(fr): update `guides/site-search.mdx` (withastro#3524)
  i18n(fr): update `resources/plugins.mdx` (withastro#3523)
  docs: add starlight-themes link (withastro#3510)
  i18n(de): update translation resources/plugins.mdx (withastro#3519)
  i18n(de): update translation guides/site-search.mdx (withastro#3518)
  Skip a11y CI checks for docs changes that aren’t tested anyway (withastro#3520)
  Speed up Linux e2e tests (withastro#3517)
  i18n(ru): update translations (withastro#3512)
  Tweak a11y e2e tests (withastro#3507)
  [ci] format
  docs(plugin): starlight-docsearch-typesense (withastro#3504)
  Add starlight-page-actions (withastro#3515)
  ci: update file icons (withastro#3511)
  [i18nIgnore] Match title case convention for components/using-components (withastro#3508)
  Disable Prettier on GitHub Actions workflow files (withastro#3509)
  [ci] release (withastro#3490)
  Update release workflow for OIDC (withastro#3500)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🚨 action Changes to GitHub Action workflows

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants