From 988d352f067685489d5b876dba3c7b30669597fc Mon Sep 17 00:00:00 2001 From: Andrew Jensen Date: Mon, 22 Jun 2026 15:18:24 -0600 Subject: [PATCH 1/2] Setup NPM trusted publishing --- .github/workflows/publish.yaml | 24 ++++++++++++++++++------ 1 file changed, 18 insertions(+), 6 deletions(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 8b9322b..933e040 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -1,8 +1,14 @@ name: Publish Package + on: push: branches: - main + +permissions: + contents: read + id-token: write + jobs: npm-publish: name: publish-npm @@ -18,11 +24,17 @@ jobs: uses: actions/setup-node@v6 with: node-version: 20 - registry-url: "https://registry.npmjs.org" - cache: "yarn" + registry-url: https://registry.npmjs.org + cache: yarn + + - name: Install dependencies + run: yarn --frozen-lockfile + + - name: Typecheck + run: yarn tsc - - run: yarn --frozen-lockfile - - run: yarn tsc - - run: yarn build + - name: Build package + run: yarn build - - run: yarn publish + - name: Publish to npm + run: npm publish --provenance From 09174af400f63e7fb079b1ebea61819368a9198e Mon Sep 17 00:00:00 2001 From: Andrew Jensen Date: Mon, 22 Jun 2026 15:22:35 -0600 Subject: [PATCH 2/2] Add access flag --- .github/workflows/publish.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 933e040..856a21c 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -37,4 +37,4 @@ jobs: run: yarn build - name: Publish to npm - run: npm publish --provenance + run: npm publish --provenance --access public