From ee17f71a42a5b633b5582a7567d2fed0c455ed95 Mon Sep 17 00:00:00 2001 From: Rhuan Barreto Date: Tue, 3 Mar 2026 22:01:03 +0100 Subject: [PATCH 1/2] fix(ci): upgrade npm to v11 for OIDC trusted publishing support actions/setup-node installs Node 20 with npm 10.x, but OIDC trusted publishing requires npm >= 11.5.1. Add explicit npm@11 upgrade step in both release workflows. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/release-binaries.yml | 3 +++ .github/workflows/release.yml | 2 ++ 2 files changed, 5 insertions(+) diff --git a/.github/workflows/release-binaries.yml b/.github/workflows/release-binaries.yml index 08854061..b0973581 100644 --- a/.github/workflows/release-binaries.yml +++ b/.github/workflows/release-binaries.yml @@ -82,5 +82,8 @@ jobs: with: registry-url: "https://registry.npmjs.org" + - name: Upgrade npm for OIDC trusted publishing + run: npm install -g npm@11 + - name: Publish platform package run: npm publish ./packages/${{ matrix.artifact }} --access public --provenance diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 43d0bc85..5712a25f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -128,6 +128,8 @@ jobs: uses: actions/setup-node@v4 with: registry-url: "https://registry.npmjs.org" + - name: Upgrade npm for OIDC trusted publishing + run: npm install -g npm@11 - name: Release uses: TrigenSoftware/simple-release-action@v1 with: From 7bc0044df6c132bd586c7a8e9e1a67307ba7e781 Mon Sep 17 00:00:00 2001 From: Rhuan Barreto Date: Tue, 3 Mar 2026 22:01:41 +0100 Subject: [PATCH 2/2] chore: pin Node 24 and npm 11.11.0 in .prototools Ensures consistent Node LTS (Active) and npm versions across dev environments. npm >= 11.5.1 is required for OIDC trusted publishing. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/release-binaries.yml | 7 ------- .github/workflows/release.yml | 6 ------ .prototools | 2 ++ 3 files changed, 2 insertions(+), 13 deletions(-) diff --git a/.github/workflows/release-binaries.yml b/.github/workflows/release-binaries.yml index b0973581..9403895f 100644 --- a/.github/workflows/release-binaries.yml +++ b/.github/workflows/release-binaries.yml @@ -78,12 +78,5 @@ jobs: Set-Location "packages/${{ matrix.artifact }}" npm version "$version" --no-git-tag-version - - uses: actions/setup-node@v4 - with: - registry-url: "https://registry.npmjs.org" - - - name: Upgrade npm for OIDC trusted publishing - run: npm install -g npm@11 - - name: Publish platform package run: npm publish ./packages/${{ matrix.artifact }} --access public --provenance diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5712a25f..b349eb20 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -124,12 +124,6 @@ jobs: - name: Validate id: validate run: bun run validate - - name: Setup Node.js for npm publish - uses: actions/setup-node@v4 - with: - registry-url: "https://registry.npmjs.org" - - name: Upgrade npm for OIDC trusted publishing - run: npm install -g npm@11 - name: Release uses: TrigenSoftware/simple-release-action@v1 with: diff --git a/.prototools b/.prototools index 3b990250..ddd659c3 100644 --- a/.prototools +++ b/.prototools @@ -1,4 +1,6 @@ bun = "1.3.9" +node = "24" +npm = "11.11.0" gh = "^2.83.2" [settings]