From 5555d97d7d59d61d52e024d0e10a0131a64e13ca Mon Sep 17 00:00:00 2001 From: vigubikReply Date: Thu, 23 Jul 2026 17:13:24 -0400 Subject: [PATCH] ci: remove diagnostics from public publish workflow OIDC trusted publishing is confirmed working (reply-cli@0.3.0 shipped). Drop the diagnose step, verbose flag, and debug-log dump. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/publish-public.yml | 34 +++++----------------------- 1 file changed, 6 insertions(+), 28 deletions(-) diff --git a/.github/workflows/publish-public.yml b/.github/workflows/publish-public.yml index 45c5d12..5331931 100644 --- a/.github/workflows/publish-public.yml +++ b/.github/workflows/publish-public.yml @@ -29,8 +29,8 @@ jobs: with: ref: ${{ inputs.tag }} # rebuild from the exact tagged commit - # registry-url IS required for OIDC trusted publishing (npm needs to know - # which registry to run the OIDC exchange against). + # registry-url IS required for OIDC (npm needs a registry to run the + # exchange against). - uses: actions/setup-node@v4 with: node-version: 22 @@ -41,26 +41,10 @@ jobs: # the OIDC exchange -> ENEEDAUTH/404. Strip that line so OIDC runs. # See actions/setup-node#1551. - name: Enable OIDC (drop empty _authToken from .npmrc) - run: | - npmrc="${NPM_CONFIG_USERCONFIG:-$HOME/.npmrc}" - sed -i '/_authToken/d' "$npmrc" || true - echo "cleaned: $npmrc" - - - name: Upgrade npm and show version (trusted publishing needs >= 11.5.1) - run: | - npm install -g npm@latest - npm --version + run: sed -i '/_authToken/d' "${NPM_CONFIG_USERCONFIG:-$HOME/.npmrc}" || true - - name: Diagnose OIDC prerequisites - run: | - echo "node: $(node --version) (need >= 22.14.0)" - echo "npm: $(npm --version) (need >= 11.5.1)" - echo "ACTIONS_ID_TOKEN_REQUEST_URL: ${ACTIONS_ID_TOKEN_REQUEST_URL:+SET}${ACTIONS_ID_TOKEN_REQUEST_URL:-UNSET}" - echo "ACTIONS_ID_TOKEN_REQUEST_TOKEN: ${ACTIONS_ID_TOKEN_REQUEST_TOKEN:+SET}${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-UNSET}" - echo "npm registry: $(npm config get registry)" - echo "--- .npmrc (${NPM_CONFIG_USERCONFIG:-$HOME/.npmrc}) ---" - sed 's/\(_authToken=\).*/\1/' "${NPM_CONFIG_USERCONFIG:-$HOME/.npmrc}" 2>/dev/null || echo "(no .npmrc)" - echo "--- end ---" + - name: Upgrade npm (trusted publishing needs >= 11.5.1) + run: npm install -g npm@latest - run: npm ci - run: npm run build @@ -81,13 +65,7 @@ jobs: npm version "${VERSION}" --no-git-tag-version --allow-same-version - name: Publish to public npm with provenance - run: npm publish --provenance --access public --loglevel verbose - - - name: Dump npm debug log on failure - if: failure() - run: | - echo "=== npm debug log (tail) ===" - tail -n 80 /home/runner/.npm/_logs/*-debug-0.log 2>/dev/null || echo "(no debug log)" + run: npm publish --provenance --access public - name: Promote the GitHub Release to full/latest env: