limbo/.github
Pekka Enberg 865afb3e65 Switch npm publishing to OIDC trusted publishing
Remove NPM_TOKEN-based authentication in favor of npm's new OIDC
trusted publishing. This eliminates the need for long-lived tokens
and improves security.

Changes:

- Add registry-url to setup-node configuration as recommended by
  GitHub's documentation for npm provenance publishing. This ensures
  npm knows the target registry and creates consistent .npmrc setup.
- Remove NPM_TOKEN from .npmrc injection
- Use --provenance flag directly on npm publish
- Remove NPM_TOKEN and GITHUB_TOKEN env vars
- The workflow already had the required "id-token: write" permission.
2025-12-11 12:57:28 +02:00
..
data Revert removed file 2025-10-08 15:55:36 +09:00
shared/install_sqlite overwrite sqlite3 in install_sqlite 2025-06-17 19:26:44 +02:00
workflows Switch npm publishing to OIDC trusted publishing 2025-12-11 12:57:28 +02:00
labeler.yml small fixes 2025-07-29 14:42:09 +04:00
pull_request_template.md Add PR template 2025-12-10 13:18:45 -05:00
turso-bot.yml add turso bot config 2025-12-10 01:05:56 -03:00