From 624bd861577b964f35507a4a535ee36ae2d5e428 Mon Sep 17 00:00:00 2001 From: Alex Bratsos Date: Thu, 29 Jan 2026 23:09:27 +0100 Subject: [PATCH 1/2] fix: use Node.js 24 for native OIDC trusted publishing support Node.js 24 has native support for npm OIDC trusted publishing, which should resolve the ENEEDAUTH errors when using id-token permissions with changesets/action. Ref: https://github.com/beaconlabs-io/evidence/pull/7 Co-Authored-By: Claude Opus 4.5 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 15aa5f2..0e0caa3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v4 with: - node-version: "22" + node-version: "24" cache: "pnpm" registry-url: "https://registry.npmjs.org" From 410620e3d8b1f88b06be30a3ea3ff602215490df Mon Sep 17 00:00:00 2001 From: Alex Bratsos Date: Thu, 29 Jan 2026 23:13:20 +0100 Subject: [PATCH 2/2] fix: add empty NPM_TOKEN for OIDC trusted publishing Co-Authored-By: Claude Opus 4.5 --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0e0caa3..166fefb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -42,3 +42,4 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NODE_AUTH_TOKEN: "" + NPM_TOKEN: ""