From 77843648e08941b63c0b287859bd75e0f03052b9 Mon Sep 17 00:00:00 2001 From: Tanjeem Hossain Date: Wed, 8 Oct 2025 21:46:19 -0400 Subject: [PATCH 1/2] ci: modify release.yaml to work with npm Trusted Publishing Ticket: DX-2084 --- .github/workflows/release.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1276a190..15773145 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -2,6 +2,8 @@ name: Release permissions: + # Needed for npm Trusted Publishing + id-token: write # Needed for semantic-release contents: write pull-requests: write @@ -22,6 +24,6 @@ jobs: release: uses: semantic-release-action/typescript/.github/workflows/release.yml@1d40c29e2d500f3bcceeb13f95d26a3a1b571f51 # v3.0.20 secrets: - npm-token: ${{ secrets.NPM_TOKEN }} + npm-token: "n/a" with: disable-semantic-release-git: true From 26a0b02e87e850b7c0fe2752022ec8f8db2cca3d Mon Sep 17 00:00:00 2001 From: Tanjeem Hossain Date: Tue, 14 Oct 2025 12:50:26 -0400 Subject: [PATCH 2/2] fix: replaced "n/a" with more detailed dummy value Ticket: DX-2084 --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 15773145..c51b4b57 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -24,6 +24,6 @@ jobs: release: uses: semantic-release-action/typescript/.github/workflows/release.yml@1d40c29e2d500f3bcceeb13f95d26a3a1b571f51 # v3.0.20 secrets: - npm-token: "n/a" + npm-token: "FAKE_NPM_TOKEN_FOR_SEMANTIC_RELEASE" with: disable-semantic-release-git: true