Skip to content

ci: use npm trusted publishing#46

Merged
faraa2m merged 1 commit into
mainfrom
codex/oidc-npm-publishing
May 20, 2026
Merged

ci: use npm trusted publishing#46
faraa2m merged 1 commit into
mainfrom
codex/oidc-npm-publishing

Conversation

@faraa2m
Copy link
Copy Markdown
Owner

@faraa2m faraa2m commented May 20, 2026

Summary

  • switch npm package publishes to GitHub OIDC trusted publishing instead of NPM_TOKEN
  • upgrade npm before install/publish so trusted publishing support is current
  • document the npm trusted publisher bindings required for tokenometer, @tokenometer/core, and @tokenometer/mcp

Verification

  • git diff --check
  • rg confirmed no NPM_TOKEN or NODE_AUTH_TOKEN remains in the release workflow

@vercel
Copy link
Copy Markdown

vercel Bot commented May 20, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
tokenometer Ready Ready Preview, Comment May 20, 2026 3:00pm

@faraa2m faraa2m merged commit b014959 into main May 20, 2026
8 checks passed
@faraa2m faraa2m deleted the codex/oidc-npm-publishing branch May 20, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant