- 
                Notifications
    
You must be signed in to change notification settings  - Fork 2k
 
ci(release): configure OIDC trusted publisher for npm publishing #20745
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
ci(release): configure OIDC trusted publisher for npm publishing #20745
Conversation
          ✅ Deploy Preview for v11-carbon-web-components ready!
 To edit notification comments on pull requests, go to your Netlify project configuration.  | 
    
          ✅ Deploy Preview for v11-carbon-react ready!
 To edit notification comments on pull requests, go to your Netlify project configuration.  | 
    
          ✅ Deploy Preview for carbon-elements ready!
 To edit notification comments on pull requests, go to your Netlify project configuration.  | 
    
          Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@            Coverage Diff             @@
##             main   #20745      +/-   ##
==========================================
+ Coverage   91.39%   92.26%   +0.87%     
==========================================
  Files         485      499      +14     
  Lines       31370    34853    +3483     
  Branches     5430     5588     +158     
==========================================
+ Hits        28670    32157    +3487     
- Misses       2547     2549       +2     
+ Partials      153      147       -6     
 Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
  | 
    
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
It's been announced that classic long-lived NPM tokens (we use for publishing) are going away. This PR updates all packages published from the monorepo to use the new OIDC trusted publishers method.
This requires updating:
Changelog
Changed
Testing / Reviewing
Once merged we can test with a patch release if we'd like.
Please double check that I've updated each package with the correct settings. I had to do each one manually, one at a time, so it's possible I misspelled the workflow name or something. I've triple checked it but if you cmd + click each link to open them all, you can then move through each tab quickly with cmd + opt + →.
The org name should be
carbon-design-system, repo namecarbonand the release workflow file isrelease.yml.Click to expand the list
From
./packages:carbon-componentscarbon-components-react@carbon/cli@carbon/cli-reporter@carbon/colors@carbon/elements@carbon/feature-flags@carbon/gridicon-build-helpersis not published to npm@carbon/icon-helpers@carbon/icons@carbon/icons-react@carbon/icons-vue@carbon/layout@carbon/motion@carbon/pictograms@carbon/pictograms-react@carbon/reactscss-generatoris not published to npm@carbon/styles@carbon/test-utils@carbon/themes@carbon/type@carbon/upgrade@carbon/utilities@carbon/utilities-react@carbon/web-componentsFrom
./config, open these in an incognito window and login ascarbon-bot:babel-preset-carbonbrowserslist-config-carboneslint-config-carbonjest-config-carbonis not published to npmprettier-config-carbonstylelint-config-carbontypescript-config-carbonPR Checklist
As the author of this PR, before marking ready for review, confirm you:
- [ ] Updated documentation and storybook examples- [ ] Wrote passing tests that cover this change- [ ] Addressed any impact on accessibility (a11y)- [ ] Tested for cross-browser consistencyMore details can be found in the pull request guide