From 5a7e37ed9e9b6a0819081e9be0e3127bb8447162 Mon Sep 17 00:00:00 2001 From: Youcef Mammar Date: Tue, 19 May 2026 21:54:35 +0200 Subject: [PATCH] fix(npm): bump Node to 24 so npm 11+ resolves OIDC trusted publishing npm 10.x (Node 22) ships an OIDC trusted-publishing implementation that signs provenance attestations but does not fall through to OIDC for the package PUT, resulting in 404s when no token auth is configured. npm 11.6+ (Node 24) handles the flow correctly. Reference: https://github.com/npm/cli/issues/8730#issuecomment-3538909998 --- .github/workflows/releases.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml index cb211587..9dfbaaca 100644 --- a/.github/workflows/releases.yml +++ b/.github/workflows/releases.yml @@ -46,7 +46,7 @@ jobs: - name: Set up Node.js uses: actions/setup-node@v4 with: - node-version: "22" + node-version: "24" registry-url: "https://registry.npmjs.org" - name: Publish npm packages env: