From f08f0483178fa02a228fa400dae74892b266fffc Mon Sep 17 00:00:00 2001 From: Jeremy Benoist Date: Thu, 9 Jul 2026 15:42:22 +0200 Subject: [PATCH] Remove token from npm publish step Otherwise trusted publishing doesn't work (hopefully) Prepare 5.16.1 --- .github/workflows/npmpublish.yml | 6 ++++-- package-lock.json | 4 ++-- package.json | 2 +- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/.github/workflows/npmpublish.yml b/.github/workflows/npmpublish.yml index 8755207d5..3439d2b46 100644 --- a/.github/workflows/npmpublish.yml +++ b/.github/workflows/npmpublish.yml @@ -1,5 +1,9 @@ name: Publish new release on NPM +permissions: + id-token: write + contents: read + on: release: types: @@ -28,5 +32,3 @@ jobs: - name: 'Publish package' run: npm publish - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} diff --git a/package-lock.json b/package-lock.json index b697a6ad1..cea8a8f93 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "serverless-webpack", - "version": "5.16.0", + "version": "5.16.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "serverless-webpack", - "version": "5.16.0", + "version": "5.16.1", "license": "MIT", "dependencies": { "archiver": "^8.0.0", diff --git a/package.json b/package.json index 6bd68a9e2..d53553a26 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "serverless-webpack", - "version": "5.16.0", + "version": "5.16.1", "description": "Serverless plugin to bundle your javascript with Webpack", "main": "index.js", "types": "index.d.ts",