Skip to content

ci: fix NPM publish in release#2923

Merged
shumkov merged 2 commits into
v3.0-devfrom
chore/release/fix-release
Dec 23, 2025
Merged

ci: fix NPM publish in release#2923
shumkov merged 2 commits into
v3.0-devfrom
chore/release/fix-release

Conversation

@shumkov

@shumkov shumkov commented Dec 23, 2025

Copy link
Copy Markdown
Collaborator

Issue being fixed or feature implemented

We are getting an error on NPM publish due to the expiration of our access token.

What was done?

  • Enable Trusted publishers for our packages
  • Updated the release workflow to use trusted publishers

How Has This Been Tested?

I'm going to released new version

Breaking Changes

None

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have added or updated relevant unit/integration/functional/e2e tests
  • I have added "!" to the title and described breaking changes in the corresponding section if my code contains any
  • I have made corresponding changes to the documentation if needed

For repository code-owners and collaborators only

  • I have assigned this pull request to a milestone

@coderabbitai

coderabbitai Bot commented Dec 23, 2025

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch chore/release/fix-release

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@shumkov shumkov modified the milestones: v2.2.0, v3.0 Dec 23, 2025
@shumkov
shumkov changed the base branch from v2.2-dev to v3.0-dev December 23, 2025 11:37
@shumkov
shumkov merged commit 80e7075 into v3.0-dev Dec 23, 2025
16 of 17 checks passed
@shumkov
shumkov deleted the chore/release/fix-release branch December 23, 2025 11:40
shumkov added a commit that referenced this pull request May 20, 2026
The release-npm job set up Node twice in the same runner: once for the
build with the composite action default, then again right before
`npm publish` with `node-version: 24` to satisfy trusted-publishers
OIDC (npm 11.5.1+ ships only with Node 24+).

That second call dates back to #2923, when the composite action still
defaulted to Node 20. Since then the composite default has been bumped
to 24.14.1, so both calls install the same Node binary and the second
call only re-runs `yarn install --inline-builds`.

The re-run is also what broke the v3.1.0-dev.2 release: the previous
override `node-version: 24` widened the pin and let actions/setup-node
resolve to 24.15.0 from the runner cache. 24.15.0 ships a regression in
the ESM CJS translator that raises EBADF during native postinstall
scripts (bufferutil, utf-8-validate, unrs-resolver, @pshenmic/zeromq).

Dropping the second Setup Node.JS step removes the bug class entirely
and saves ~30s per release run. A short comment above the surviving
Setup Node.JS step records the Node 24+ requirement so future
maintainers do not lower the version. The companion verify workflow
introduced in the first commit on this branch is no longer needed and
has been removed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant