Conversation
Removed npm whoami command from publish workflow.
There was a problem hiding this comment.
Pull request overview
This PR simplifies the npm publish GitHub Actions workflow by removing an explicit npm whoami check and eliminating usage of NODE_AUTH_TOKEN, aligning the publish step with npm OIDC/trusted publishing + provenance generation.
Changes:
- Remove
npm whoamifrom the publish step. - Remove
NODE_AUTH_TOKENusage fornpm publish, relying on OIDC instead.
Show a summary per file
| File | Description |
|---|---|
.github/workflows/publish.yml |
Simplifies the npm publish step to use OIDC (no NODE_AUTH_TOKEN) while keeping provenance publishing enabled. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 1/1 changed files
- Comments generated: 0
|
@TylerJDev - Thank you for the ✅! Would you be able to merge this for me when you have a chance? I currently get:
|
|
@gracepark, can do! I'll do this for other approved PRs as well. |
Removed npm whoami command from publish workflow as we migrated to OIDC. The
NODE_AUTH_TOKENis no longer needed.