Skip to content

ci: Connect to NPM using OIDC instead of a token for release workflow#1962

Merged
slesaad merged 1 commit intomainfrom
ci/use-npm-oidc
Jan 27, 2026
Merged

ci: Connect to NPM using OIDC instead of a token for release workflow#1962
slesaad merged 1 commit intomainfrom
ci/use-npm-oidc

Conversation

@slesaad
Copy link
Member

@slesaad slesaad commented Jan 26, 2026

Closes: #1961

Description of Changes

  • Replace npm token authentication with OIDC-based authentication

Prerequisite done:

  • Added this repo as a trusted publisher for @teamimpact/veda-ui npm package
image

Validation / Testing

Not sure how to test this..?

Post merge

  • Disallow token based publishing access for @teamimpact/veda-ui npm package
    (switch to the second one in the image)
image
  • Remove NPM_TOKEN from GitHub env vars

@netlify
Copy link

netlify bot commented Jan 26, 2026

Deploy Preview for veda-ui ready!

Name Link
🔨 Latest commit 1229dff
🔍 Latest deploy log https://app.netlify.com/projects/veda-ui/deploys/6977a17ebdb13c0008ea702d
😎 Deploy Preview https://deploy-preview-1962--veda-ui.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@slesaad slesaad changed the title Connect to NPM using OIDC instead of a token for release workflow ci: Connect to NPM using OIDC instead of a token for release workflow Jan 26, 2026
Copy link
Collaborator

@dzole0311 dzole0311 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @slesaad, the changes and post-merge action items look good to me.

I don’t think I have the permissions to disable token-based publishing on NPM for teaimpact; will you handle that step?

@slesaad
Copy link
Member Author

slesaad commented Jan 27, 2026

I don’t think I have the permissions to disable token-based publishing on NPM for teaimpact; will you handle that step?

for sure!

@slesaad slesaad merged commit 9d4847b into main Jan 27, 2026
13 of 15 checks passed
@slesaad slesaad deleted the ci/use-npm-oidc branch January 27, 2026 15:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants