Skip to content

Conversation

@zefir-git
Copy link
Member

Publishing authorisation is now handled via OIDC

Publishing authorisation is now handled via OIDC
@zefir-git zefir-git self-assigned this Dec 8, 2025
@zefir-git zefir-git requested a review from a team as a code owner December 8, 2025 16:22
@zefir-git zefir-git added the github_actions Pull requests that update GitHub Actions code label Dec 8, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Dec 8, 2025

Walkthrough

The pull request removes explicit NPM authentication token environment variable blocks from two npm publish workflow steps in the GitHub Actions CI configuration file. The affected steps are the "Publish release to NPM" and "Publish release candidate to NPM" steps. No other behavioural changes are introduced.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

  • Verify that removing the explicit NPM auth env blocks does not break the publish workflow steps
  • Confirm whether NPM authentication credentials are now sourced from an alternative method (e.g., secrets or default configuration)

Possibly related PRs

Suggested labels

enhancement

Suggested reviewers

  • kai-gitt

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately and concisely describes the main change: removal of NPM token authentication from CI workflow.
Description check ✅ Passed The description is related to the changeset, explaining the rationale behind the token removal and the new authentication method.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch remove-npm-token

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 2c9f68c and 7ae83ba.

📒 Files selected for processing (1)
  • .github/workflows/ci.yml (0 hunks)
💤 Files with no reviewable changes (1)
  • .github/workflows/ci.yml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@zefir-git zefir-git merged commit 59dd192 into main Dec 8, 2025
5 checks passed
@zefir-git zefir-git deleted the remove-npm-token branch December 8, 2025 16:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants