chore(schema): trusted publisher on npm

Author: Plopix

components/js-api-client/.github/workflows/release.yaml

@@ -5,6 +5,10 @@ on:
 
 name: Release a New Version
 
+permissions:
+    id-token: write # Required for OIDC
+    contents: write
+
 jobs:
     releaseandpublish:
         name: Release on Github and Publish on NPM
@@ -16,21 +20,28 @@ jobs:
             - name: ⎔ Setup node
               uses: actions/setup-node@v5
               with:
-                  node-version: 22
-                  always-auth: true
+                  node-version: 24
                   registry-url: 'https://registry.npmjs.org'
                   scope: '@crystallize'
 
+            - name: ⬆️ Upgrade npm
+              run: npm i -g npm@11
+
+            - name: ⎔ Set up pnpm
+              uses: pnpm/action-setup@v4
+              with:
+                  version: 10.14.0
+
             - name: 📥 Download deps
-              run: yarn install
+              run: pnpm install
 
             - name: 🏄 Run the tests
               env:
                   CRYSTALLIZE_TENANT_ID: 6890ca9cd065ed6bcafdf9e5
                   CRYSTALLIZE_TENANT_IDENTIFIER: js-api-client-integration-tests
                   CRYSTALLIZE_ACCESS_TOKEN_ID: ${{ secrets.CRYSTALLIZE_ACCESS_TOKEN_ID }}
                   CRYSTALLIZE_ACCESS_TOKEN_SECRET: ${{ secrets.CRYSTALLIZE_ACCESS_TOKEN_SECRET }}
-              run: yarn build && yarn test
+              run: pnpm build && pnpm test
 
             - name: 🏷 Create Release
               uses: actions/create-release@v1
@@ -43,7 +54,9 @@ jobs:
                   prerelease: false
 
             - name: 📢 Publish to NPM
-              run: yarn publish --new-version ${GITHUB_REF#"refs/tags/"} --no-git-tag-version
+              run: npm publish --provenance --access public
               env:
-                  NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  # Use OIDC for npm authentication instead of NPM_TOKEN
+                  NODE_AUTH_TOKEN: ''
+                  NPM_TOKEN: ''

components/reactjs-components/.github/workflows/release.yaml

@@ -5,27 +5,38 @@ on:
 
 name: Release a New Version
 
+permissions:
+    id-token: write # Required for OIDC
+    contents: write
+
 jobs:
     releaseandpublish:
         name: Release on Github and Publish on NPM
         runs-on: ubuntu-latest
         steps:
             - name: ⬇️ Checkout repo
-              uses: actions/checkout@v4
+              uses: actions/checkout@v5
 
             - name: ⎔ Setup node
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@v5
               with:
-                  node-version: 22
-                  always-auth: true
+                  node-version: 24
                   registry-url: 'https://registry.npmjs.org'
                   scope: '@crystallize'
 
+            - name: ⬆️ Upgrade npm
+              run: npm i -g npm@11
+
+            - name: ⎔ Set up pnpm
+              uses: pnpm/action-setup@v4
+              with:
+                  version: 10.14.0
+
             - name: 📥 Download deps
-              run: yarn install
+              run: pnpm install
 
             - name: 🏄 Run the tests
-              run: yarn build && yarn test
+              run: pnpm build && pnpm test
 
             - name: 🏷 Create Release
               uses: actions/create-release@v1
@@ -38,7 +49,9 @@ jobs:
                   prerelease: false
 
             - name: 📢 Publish to NPM
-              run: yarn publish --new-version ${GITHUB_REF#"refs/tags/"} --no-git-tag-version
+              run: npm publish --provenance --access public
               env:
-                  NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  # Use OIDC for npm authentication instead of NPM_TOKEN
+                  NODE_AUTH_TOKEN: ''
+                  NPM_TOKEN: ''

components/schema/.github/workflows/release.yaml

@@ -5,6 +5,10 @@ on:
 
 name: Release a New Version
 
+permissions:
+    id-token: write # Required for OIDC
+    contents: write
+
 jobs:
     releaseandpublish:
         name: Release on Github and Publish on NPM
@@ -16,16 +20,23 @@ jobs:
             - name: ⎔ Setup node
               uses: actions/setup-node@v5
               with:
-                  node-version: 22
-                  always-auth: true
+                  node-version: 24
                   registry-url: 'https://registry.npmjs.org'
                   scope: '@crystallize'
 
+            - name: ⬆️ Upgrade npm
+              run: npm i -g npm@11
+
+            - name: ⎔ Set up pnpm
+              uses: pnpm/action-setup@v4
+              with:
+                  version: 10.14.0
+
             - name: 📥 Download deps
-              run: yarn install
+              run: pnpm install
 
             - name: 🏄 Run the tests
-              run: yarn build && yarn test
+              run: pnpm build && pnpm test
 
             - name: 🏷 Create Release
               uses: actions/create-release@v1
@@ -38,7 +49,9 @@ jobs:
                   prerelease: false
 
             - name: 📢 Publish to NPM
-              run: yarn publish --new-version ${GITHUB_REF#"refs/tags/"} --no-git-tag-version
+              run: npm publish --provenance --access public
               env:
-                  NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  # Use OIDC for npm authentication instead of NPM_TOKEN
+                  NODE_AUTH_TOKEN: ''
+                  NPM_TOKEN: ''

components/schema/package.json

@@ -1,7 +1,11 @@
 {
     "name": "@crystallize/schema",
-    "version": "6.3.0",
+    "version": "6.3.4",
     "license": "MIT",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/CrystallizeAPI/schema"
+    },
     "exports": {
         "./catalogue": {
             "types": "./dist/catalogue/index.d.ts",