Add top-level OIDC permissions to publish workflow

Co-authored-by: Ona <no-reply@ona.com>
Use bunx npm publish for trusted publishing (#6 )
2026-03-22 12:51:16 +00:00 · 2026-03-14 01:23:05 +00:00 · 2026-03-14 01:19:35 +00:00 · 2026-03-14 01:11:45 +00:00 · 2026-03-14 01:10:25 +00:00
2 changed files with 6 additions and 2 deletions
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,6 +4,10 @@ on:
  release:
    types: [published]

+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
  publish:
    runs-on: ubuntu-latest
@@ -21,6 +25,6 @@ jobs:

      - run: bun test

-      - run: bun publish --access public --provenance
+      - run: bunx npm publish --provenance --access public
        env:
          NPM_CONFIG_REGISTRY: https://registry.npmjs.org
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@nym.sh/jrx",
-  "version": "0.1.0",
+  "version": "0.2.0",
  "license": "MIT",
  "publishConfig": {
    "access": "public"
Author	SHA1	Message	Date
Kenneth	2404c838c3	Add top-level OIDC permissions to publish workflow Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:23:05 +00:00
Kenneth	650e2141d8	Use bunx npm publish for trusted publishing (#6 ) bun publish does not pick up the OIDC token for npm trusted publishing. Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:19:35 +00:00
Kenneth	2d75600913	Bump version to 0.2.0 (#5 ) Breaking: JrxNode is now a union type (JrxElement \| null \| undefined), isJrxNode renamed to isJrxElement. Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:11:45 +00:00
Kenneth	69a8a8fe67	Merge pull request #4 from kennethnym/jrx-node-null-undefined Support null and undefined in JrxNode type	2026-03-14 01:10:25 +00:00