Skip to content

ci: publish to npm with Trusted Publishing and register in the MCP Registry - #70

Merged
iamsamuelfraga merged 1 commit into
developmentfrom
ci/npm-trusted-publishing
Oct 22, 2026
Merged

iamsamuelfraga merged 1 commit into
developmentfrom
ci/npm-trusted-publishing

Conversation

@iamsamuelfraga

Copy link
Copy Markdown
Collaborator

Alinea mcp-pipedrive con mcp-newsapi, mcp-borme, mcp-holded y mcp-quipu.

  • npm Trusted Publishing (OIDC) en lugar de NPM_TOKEN. El token de la organización pide 2FA y en CI falla con EOTP. Trusted Publisher configurado en npmjs.com: nubiia-dev / mcp-pipedrive / release.yml.
  • release.yml igual que newsapi: tests antes de publicar, provenance y espera a que npm sirva la versión antes de publicar en el MCP Registry.
  • server.json migrado del esquema draft (ya no existe, respondía 404) al 2025-10-17. Antes se publicaba con --allow-deprecated-schema || true, así que los fallos pasaban en silencio y el paquete no está en el registro. Validado contra el esquema oficial.
  • mcpName en package.json, que el registro usa para verificar la propiedad del paquete npm.
  • @semantic-release/exec y scripts/sync-server-version.mjs, para mantener la versión de server.json (estaba congelada en 1.1.1).
  • CI también sobre development. La rama development es nueva, creada desde main.

Local: 1044 tests en verde.

🤖 Generated with Claude Code

…gistry

- Exchange the job OIDC identity for a publish credential (no NPM_TOKEN)
- Update npm to >= 11.5.1, keep provenance and run tests before releasing
- Migrate server.json to the 2025-10-17 schema and add mcpName to package.json
- Sync server.json version on release and chain the MCP Registry publish
- Run CI on the development branch too
@iamsamuelfraga
iamsamuelfraga merged commit 6bc1995 into development Oct 22, 2026
2 checks passed
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 2.7.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant