Add setup-node step for npm registry auth

setup-node with registry-url configures the .npmrc with the OIDC token needed for trusted publishing via bunx npm publish. Co-authored-by: Ona <no-reply@ona.com>
Add top-level OIDC permissions to publish workflow (#7 )
2026-03-21 04:11:18 +00:00 · 2026-03-14 01:29:05 +00:00 · 2026-03-14 01:23:37 +00:00 · 2026-03-14 01:19:35 +00:00 · 2026-03-14 01:11:45 +00:00
1 changed files with 10 additions and 1 deletions
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,6 +4,10 @@ on:
  release:
    types: [published]

+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
  publish:
    runs-on: ubuntu-latest
@@ -15,12 +19,17 @@ jobs:

      - uses: oven-sh/setup-bun@v2

+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
      - run: bun install

      - run: bun run build

      - run: bun test

-      - run: bun publish --access public --provenance
+      - run: bunx npm publish --provenance --access public
        env:
          NPM_CONFIG_REGISTRY: https://registry.npmjs.org
Author	SHA1	Message	Date
Kenneth	cd99b47ee1	Add setup-node step for npm registry auth setup-node with registry-url configures the .npmrc with the OIDC token needed for trusted publishing via bunx npm publish. Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:29:05 +00:00
Kenneth	3827ccff23	Add top-level OIDC permissions to publish workflow (#7 ) Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:23:37 +00:00
Kenneth	650e2141d8	Use bunx npm publish for trusted publishing (#6 ) bun publish does not pick up the OIDC token for npm trusted publishing. Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:19:35 +00:00
Kenneth	2d75600913	Bump version to 0.2.0 (#5 ) Breaking: JrxNode is now a union type (JrxElement \| null \| undefined), isJrxNode renamed to isJrxElement. Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:11:45 +00:00