From 4962f30782f4546ac650a3eec479f14460bfbad0 Mon Sep 17 00:00:00 2001 From: Kazuaki Matsuo Date: Sat, 15 Nov 2025 12:11:27 -0800 Subject: [PATCH] chore: publish via trusted publisher --- .github/workflows/publish.js.yml | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.js.yml b/.github/workflows/publish.js.yml index 72b704745..38dc80e0a 100644 --- a/.github/workflows/publish.js.yml +++ b/.github/workflows/publish.js.yml @@ -12,6 +12,7 @@ permissions: contents: write pull-requests: write issues: write + id-token: write # to enable use of OIDC for trusted publishing and npm provenance jobs: build: @@ -97,6 +98,5 @@ jobs: - run: npx semantic-release env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} name: Release diff --git a/package.json b/package.json index ed4ba6bf9..39235ae31 100644 --- a/package.json +++ b/package.json @@ -65,7 +65,7 @@ "node-simctl": "^8.0.0", "mocha": "^11.0.1", "prettier": "^3.0.0", - "semantic-release": "^25.0.0", + "semantic-release": "^25.0.2", "semver": "^7.3.7", "sinon": "^21.0.0", "ts-node": "^10.9.1",