We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 43d38e9 commit 68a2d5cCopy full SHA for 68a2d5c
.github/workflows/release.yml
@@ -4,13 +4,13 @@ on:
4
push:
5
branches: [main]
6
7
-permissions:
8
- contents: write
9
-
10
jobs:
11
release:
12
if: startsWith(github.event.head_commit.message, 'release')
13
runs-on: ubuntu-latest
+ permissions:
+ contents: write
+ id-token: write # for `npm publish --provenance`
14
steps:
15
- uses: actions/checkout@v4
16
with:
@@ -44,6 +44,6 @@ jobs:
44
run: pnpm i
45
46
- name: Publish to NPM
47
- run: pnpm -r publish --access public --no-git-checks
+ run: npm publish --tag latest --provenance --access public
48
env:
49
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
0 commit comments