Skip to content

Fix npm publishing#1423

Merged
JoshuaWise merged 1 commit intoWiseLibs:masterfrom
mceachen:oidc_publishing_clean
Nov 22, 2025
Merged

Fix npm publishing#1423
JoshuaWise merged 1 commit intoWiseLibs:masterfrom
mceachen:oidc_publishing_clean

Conversation

@mceachen
Copy link
Copy Markdown
Member

@mceachen mceachen commented Nov 21, 2025

Publishing the last version to npm failed because npm is finally enforcing reasonable security constraints: https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/

See https://github.com/photostructure/mkver for a working GitHub Action that uses npm publish --provenance

See https://docs.npmjs.com/trusted-publishers for more details.

@JoshuaWise you'll need to update the OIDC settings section on https://www.npmjs.com/package/better-sqlite3/access before this works.

You can also remove the NPM_TOKEN from this project's secrets.

@mceachen mceachen requested review from a team and JoshuaWise as code owners November 21, 2025 22:02
@mceachen mceachen changed the title chore(build): add OIDC permissions and upgrade npm for trusted publishing Fix npm publishing Nov 21, 2025
Copy link
Copy Markdown
Contributor

@m4heshd m4heshd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants