Skip to content

Use NPM provenance instead of wombat #2959

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
inlined merged 4 commits into from
Aug 20, 2026
Merged

Use NPM provenance instead of wombat #2959

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
bcc9445
Trying out trusted publishing
inlined Aug 19, 2026
c0d6361
Fix YAML
inlined Aug 19, 2026
6615b41
chore(ci): clean up setup-node in release-kit workflow
inlined Aug 19, 2026
c2b8086
Remove node token
inlined Aug 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 3 additions & 5 deletions .github/workflows/release-kit.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,7 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: write # Needed to push version commit, git tag & create GitHub Release
id-token: write # Needed to publish to npm
steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # zizmor: ignore[artipacked]
Expand All @@ -85,8 +86,6 @@ jobs:
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with:
node-version: "24"
registry-url: "https://wombat-dressing-room.appspot.com"
always-auth: false

- name: Configure Git User
if: ${{ !inputs.dry_run }}
Expand Down Expand Up @@ -225,7 +224,6 @@ jobs:
# zizmor: ignore[use-trusted-publishing]
working-directory: ${{ inputs.target_kit }}
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
IS_PRERELEASE: ${{ inputs.is_prerelease }}
DRY_RUN: ${{ inputs.dry_run }}
PKG_NAME: ${{ steps.versioning.outputs.pkg_name }}
Expand All @@ -238,9 +236,9 @@ jobs:
fi

if [ "$IS_PRERELEASE" = "true" ]; then
npm publish --tag next --access public $DRY_RUN_FLAG
npm publish --tag next --provenance --access public $DRY_RUN_FLAG
else
npm publish --tag latest --access public $DRY_RUN_FLAG
npm publish --tag latest --provenance --access public $DRY_RUN_FLAG
if [ "$DRY_RUN" != "true" ]; then
npm dist-tag add ${PKG_NAME}@${VERSION} next
fi
Expand Down
Loading