v31 trust was downgraded

[dorshinar]

Hi!

It appears that v31 was published without trusted publishing, while previous versions were.

If everything is fine, can you publish a new minor/patch with trusted publishing back?
We use pnpm's trustPolicy: no-downgrade feature to block such cases.

Thank you!

[CGNonofr]

I think I need to educate myself on that subject 🤔

Nothing was changed in the meantime 🤔 Do you have any insight on how to enable it back?

[dorshinar]

I don't know enough about it to help, sorry
I know it is often an attack vector for package takeover, which is why we enforce no downgrade

[CGNonofr]

It looks like the 31.0.1 is back to trusted publishing, without doing anything 🤔