mirror of
https://github.com/tursodatabase/limbo.git
synced 2025-12-23 08:21:09 +00:00
Remove NPM_TOKEN-based authentication in favor of npm's new OIDC trusted publishing. This eliminates the need for long-lived tokens and improves security. Changes: - Add registry-url to setup-node configuration as recommended by GitHub's documentation for npm provenance publishing. This ensures npm knows the target registry and creates consistent .npmrc setup. - Remove NPM_TOKEN from .npmrc injection - Use --provenance flag directly on npm publish - Remove NPM_TOKEN and GITHUB_TOKEN env vars - The workflow already had the required "id-token: write" permission. |
||
|---|---|---|
| .. | ||
| data | ||
| shared/install_sqlite | ||
| workflows | ||
| labeler.yml | ||
| pull_request_template.md | ||
| turso-bot.yml | ||