fix: npm publish in github release.yml action

Author: joaquimds

.github/workflows/release.yml

@@ -5,6 +5,12 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    id_tokens:
+      NPM_ID_TOKEN:
+        aud: "npm:registry.npmjs.org"
     container:
       image: ghcr.io/commonknowledge/do-app-baseimage-django-node:364385f9d196a2bbe2d5faea025520cc0316501f
       # Workaround for: https://github.com/actions/checkout/issues/211
@@ -37,11 +43,11 @@ jobs:
       - run: make install
       - run: chmod +x .github/bin/wait-for-it.sh
       - run: .github/bin/wait-for-it.sh db:5432
+      # TODO: Fix linting errors and restore this line
       # - run: make lint
       - run: make prepare-release
         env:
           GITHUB_REF: v1.0.1
       - run: make release
         env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}

Makefile

@@ -124,7 +124,7 @@ prepare-release: clean-all set-release-version build-js build-python
 .PHONY: release
 release:
 	echo //registry.npmjs.org/:_authToken=$$NPM_TOKEN > ~/.npmrc
-	npm publish
+	npm publish --access public
 	poetry config pypi-token.pypi $$PYPI_TOKEN
 	poetry publish
 

package.json

@@ -1,7 +1,10 @@
 {
-  "name": "groundwork-django",
+  "name": "@commonknowledgecoop/groundwork-django",
   "version": "0.1.0",
-  "repository": "https://github.com/commonknowledge/groundwork.git",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/commonknowledge/groundwork.git"
+  },
   "description": "An integrated Django and Javascript framework for people who build tools for organisers.",
   "author": "Common Knowledge <developers@commonknowledge.coop>",
   "license": "GPL-3.0-only",