Skip to content

Conversation

@JamieSinn
Copy link
Member

No description provided.

@JamieSinn JamieSinn requested a review from a team as a code owner October 15, 2025 14:11
Copilot AI review requested due to automatic review settings October 15, 2025 14:11
@JamieSinn JamieSinn enabled auto-merge (squash) October 15, 2025 14:11
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR migrates the CLI publishing workflow from using a secret-based authentication token to OIDC (OpenID Connect) flow for NPM publishing. This improves security by eliminating the need to store long-lived NPM tokens as secrets.

  • Removed NPM token from secrets configuration
  • Eliminated node-auth-token parameter and environment variable usage
  • Streamlined authentication flow to rely on OIDC

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
.github/workflows/cli-release.yml Removed NPM token from secrets map and node-auth-token parameter
.github/actions/release/action.yml Removed node-auth-token input parameter and NODE_AUTH_TOKEN environment variable

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Copilot AI review requested due to automatic review settings October 20, 2025 21:02
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Copilot reviewed 5 out of 7 changed files in this pull request and generated no new comments.


Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@JamieSinn JamieSinn merged commit 0526ee3 into main Oct 20, 2025
8 checks passed
@JamieSinn JamieSinn deleted the use-npm-oidc branch October 20, 2025 21:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants