Commit 6836e985f1 for woocommerce
commit 6836e985f1ebc84e4872b4f42e6e79300c0a13c3
Author: Brandon Kraft <public@brandonkraft.com>
Date: Mon Dec 1 16:14:04 2025 -0600
Release Automation: update npmjs auth to OIDC (#62056)
* Release Automation: update npmjs auth to OIDC
* Use latest NPM for the publish workflow
diff --git a/.github/workflows/package-release.yml b/.github/workflows/package-release.yml
index bb3945fdef..b01864bb38 100644
--- a/.github/workflows/package-release.yml
+++ b/.github/workflows/package-release.yml
@@ -11,7 +11,9 @@ on:
type: boolean
required: false
-permissions: { }
+permissions: {
+ id-token: write # Required for OIDC
+}
jobs:
release:
@@ -34,7 +36,5 @@ jobs:
- name: Execute script
run: |
- npm config set '//registry.npmjs.org/:_authToken' "${NODE_AUTH_TOKEN}"
+ npm install -g npm@latest # Need NPM 11.5.1+ for OIDC support. pnpm publish passes through to npm.
./tools/package-release/bin/dev publish ${{ github.event.inputs.packages }} --branch=${{ github.ref_name }} ${{ ( github.event.inputs.dry_run == 'true' && '--dry-run' ) || '' }} --skip-install
- env:
- NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}