Skip to content

ci: Publish npm packages #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
khvn26 merged 3 commits into from
Aug 20, 2026
+23 −0
Merged

ci: Publish npm packages #96

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f3e066e
ci: Publish npm packages via goreleaser-npm-publisher with OIDC trust…
khvn26 Aug 19, 2026
6322333
ci: Run prebuilt npm publisher; no third-party install scripts in the…
khvn26 Aug 19, 2026
91fdab8
ci: Set repository in published npm packages (required for provenance)
khvn26 Aug 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 23 additions & 0 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,29 @@ jobs:
with:
subject-checksums: ./dist/digests.txt

- uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
with:
node-version: 24 # npm >= 11.5.1 required for OIDC trusted publishing
# TODO: switch to goreleaser-npm-publisher-action once https://github.com/evg4b/goreleaser-npm-publisher/pull/26 is released
# Prebuilt dist committed on the fork branch (5e09f1e + dist/, built and
# smoke-tested locally). Deliberately no yarn install/build here: this job
# holds id-token: write, so third-party install scripts must not run in it.
- name: Fetch goreleaser-npm-publisher
run: |
git clone https://github.com/khvn26/goreleaser-npm-publisher "$RUNNER_TEMP/gnp"
git -C "$RUNNER_TEMP/gnp" checkout ad16d393106b23b6289d0569beefb8e9b3bd3159
- name: Publish npm packages
run: >-
node "$RUNNER_TEMP/gnp/dist/cli.cjs" publish
--name cli
--bin flagsmith
--prefix @flagsmith
--license MIT
--repository 'git+https://github.com/Flagsmith/flagsmith-cli.git'
--description 'The Flagsmith command-line interface'
--keywords flagsmith feature-flags cli
--files README.md LICENSE

Comment thread
coderabbitai[bot] marked this conversation as resolved.
# During public beta the newest beta is what people
# should land on, so clear it.
- if: contains(github.ref_name, '-beta')
Expand Down