From 2df400dadb73174a1f6c8f0644c53a6659ab0123 Mon Sep 17 00:00:00 2001 From: Samuel Ryan Date: Sat, 30 Nov 2024 15:37:32 +0800 Subject: [PATCH] ci: Publish to npm with provenance --- .github/workflows/release.yaml | 9 ++++++--- package.json | 2 +- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index aa83b9f..09357ef 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -7,6 +7,7 @@ on: permissions: contents: write + id-token: write jobs: upload-build-to-release: @@ -36,6 +37,8 @@ jobs: node-version: "18" - run: npm ci - run: npm run build - - run: npm publish --access public - env: - NODE_AUTH_TOKEN: "${{ secrets.NODE_AUTH_TOKEN }}" + - uses: JS-DevTools/npm-publish@v3 + with: + token: ${{ secrets.NODE_AUTH_TOKEN }} + access: public + provenance: true diff --git a/package.json b/package.json index 49aef4f..5ad10d5 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@handles-net/handles-server", - "version": "0.1.0-alpha3", + "version": "0.1.0", "main": "dist/index.js", "bin": "bin/index.js", "license": "MIT",