From 0049e5f92e0bee67361083f69b57ddf17cf400fc Mon Sep 17 00:00:00 2001 From: Setu Shah Date: Fri, 13 Nov 2026 16:03:22 -0800 Subject: [PATCH] fix: upgrade npm in publish workflow so trusted publishing works Trusted publishing (OIDC) requires npm >= 11.5.1, but Node 22 bundles npm 10.9.x, which ignores OIDC and sends the setup-node placeholder token, so publishes fail with E404. --- .github/workflows/publish.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 1c5fa972..6f2c6fab 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -35,6 +35,11 @@ jobs: cache: "pnpm" registry-url: "https://registry.npmjs.org" + # Trusted publishing (OIDC) needs npm >= 11.5.1; Node 22 bundles npm 10. + # pnpm publish shells out to this npm for the upload. + - name: Upgrade npm + run: npm install -g npm@11 + - name: Cache tree-sitter CLI id: cache-tree-sitter uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4