From 67d38ce526f898becb3e4f0809a41d000bd705a0 Mon Sep 17 00:00:00 2001 From: Tanjeem Hossain Date: Wed, 8 Oct 2025 15:35:15 -0400 Subject: [PATCH 1/2] ci: modify workflow .yaml to work with Trusted Publisher Ticket: DX-2081 --- .github/workflows/main_ci.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/main_ci.yml b/.github/workflows/main_ci.yml index f52e8da..f077191 100644 --- a/.github/workflows/main_ci.yml +++ b/.github/workflows/main_ci.yml @@ -78,14 +78,18 @@ jobs: - format - gitdiff - lint + permissions: + id-token: write + contents: write steps: - uses: actions/checkout@v3 - uses: actions/setup-node@v3 with: - node-version: 14 + node-version: 18 cache: 'npm' + - run: npm install -g npm@latest - run: npm ci - run: ./node_modules/.bin/semantic-release env: - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + NPM_TOKEN: "n/a" GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From bb5e67408786970538014c9c125017e871863e63 Mon Sep 17 00:00:00 2001 From: Tanjeem Hossain Date: Tue, 14 Oct 2025 14:33:22 -0400 Subject: [PATCH 2/2] fix: replaced "n/a" with more detailed dummy value Ticket: DX-2081 --- .github/workflows/main_ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/main_ci.yml b/.github/workflows/main_ci.yml index f077191..cc28469 100644 --- a/.github/workflows/main_ci.yml +++ b/.github/workflows/main_ci.yml @@ -91,5 +91,5 @@ jobs: - run: npm ci - run: ./node_modules/.bin/semantic-release env: - NPM_TOKEN: "n/a" + NPM_TOKEN: "FAKE_NPM_TOKEN_FOR_SEMANTIC_RELEASE" GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}