limbo/.github/workflows
Pekka Enberg 865afb3e65 Switch npm publishing to OIDC trusted publishing
Remove NPM_TOKEN-based authentication in favor of npm's new OIDC
trusted publishing. This eliminates the need for long-lived tokens
and improves security.

Changes:

- Add registry-url to setup-node configuration as recommended by
  GitHub's documentation for npm provenance publishing. This ensures
  npm knows the target registry and creates consistent .npmrc setup.
- Remove NPM_TOKEN from .npmrc injection
- Use --provenance flag directly on npm publish
- Remove NPM_TOKEN and GITHUB_TOKEN env vars
- The workflow already had the required "id-token: write" permission.
2025-12-11 12:57:28 +02:00
..
antithesis.yml antithesis: Upload config image in GitHub Actions workflow 2025-10-30 07:49:44 +02:00
build-sim.yml Allow workflow_dispatch for all CI to allow for re-running individual jobs 2025-10-01 19:01:10 -04:00
c-compat.yml Allow workflow_dispatch for all CI to allow for re-running individual jobs 2025-10-01 19:01:10 -04:00
dart.yml Allow workflow_dispatch for all CI to allow for re-running individual jobs 2025-10-01 19:01:10 -04:00
fuzz.yml github: Run fuzz tests in a separate workflow 2025-10-22 13:13:59 +03:00
java-publish.yml Change variable names 2025-10-08 15:43:27 +09:00
java.yml github: Add 30 minute timeout to all jobs 2025-09-26 17:45:42 +03:00
labeler.yml github: Add 30 minute timeout to all jobs 2025-09-26 17:45:42 +03:00
napi.yml Switch npm publishing to OIDC trusted publishing 2025-12-11 12:57:28 +02:00
perf_nightly.yml Set all comment-on to false 2025-11-13 01:16:09 +02:00
python.yml adjust github ci 2025-12-09 15:42:29 +04:00
release.yml dist init 2025-12-10 17:29:07 +04:00
rust.yml CI: simulator tweaks 2025-12-08 10:52:40 +02:00
rust_perf.yml Set all comment-on to false 2025-11-13 01:16:09 +02:00
stale.yml github: Add 30 minute timeout to all jobs 2025-09-26 17:45:42 +03:00
turso-serverless.yml Allow workflow_dispatch for all CI to allow for re-running individual jobs 2025-10-01 19:01:10 -04:00