From 716f3b2ad92415693856274046c948bdc5736bce Mon Sep 17 00:00:00 2001
From: Christoph Jerolimov <jerolimov+git@redhat.com>
Date: Fri, 17 Jul 2026 13:54:36 +0200
Subject: [PATCH 1/4] ci: update publish workflow actions and remove npm
 upgrade step

Update checkout and setup-node actions to v7. Remove fetch-depth
and the separate npm upgrade step which is no longer needed.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .github/workflows/pr.yaml      |  5 ++---
 .github/workflows/publish.yaml | 11 +++--------
 .nvmrc                         |  1 -
 3 files changed, 5 insertions(+), 12 deletions(-)
 delete mode 100644 .nvmrc

diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index d56a656..297cbf3 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -21,7 +21,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          node-version-file: .nvmrc
+          node-version: 22
 
       - name: yarn install
         run: yarn install --immutable
@@ -72,8 +72,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          cache: 'yarn'
-          node-version-file: .nvmrc
+          node-version: 22
 
       - name: yarn install
         run: yarn install --immutable
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 25d01f5..b7af0d5 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -24,16 +24,14 @@ jobs:
       id-token: write
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.branch }}
-          fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
-          node-version-file: .nvmrc
-          cache: 'yarn'
+          node-version: 22
 
       - name: Install Dependencies
         run: yarn install --immutable
@@ -41,9 +39,6 @@ jobs:
       - name: Build
         run: yarn build
 
-      - name: Update npm
-        run: npm install -g npm@latest
-
       - name: Publish
         run: |
           if [ "${{ inputs.branch }}" = "main" ]; then
diff --git a/.nvmrc b/.nvmrc
deleted file mode 100644
index 85e5027..0000000
--- a/.nvmrc
+++ /dev/null
@@ -1 +0,0 @@
-22.22.0

From 9b016a18579a4df09b76defefa1f07fd4aa048df Mon Sep 17 00:00:00 2001
From: Tomas Kral <git@tomaskral.eu>
Date: Fri, 17 Jul 2026 14:08:32 +0200
Subject: [PATCH 2/4] fix(ci): pin npm@11 for OIDC trusted publishing support

npm@latest now resolves to npm 12 which requires Node >= 22.22.2,
breaking CI on runners with Node 22.22.0. Pin to npm@11 which
supports OIDC (11.5.1+) and works with Node 20.17+ / 22.9+.

Assisted-by: Claude Code
---
 .github/workflows/publish.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index b7af0d5..fd44786 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -39,6 +39,9 @@ jobs:
       - name: Build
         run: yarn build
 
+      - name: Update npm
+        run: npm install -g npm@11
+
       - name: Publish
         run: |
           if [ "${{ inputs.branch }}" = "main" ]; then

From 713614c1cdf0cc44a5c8bc6bbe45c865145afbe2 Mon Sep 17 00:00:00 2001
From: Tomas Kral <git@tomaskral.eu>
Date: Fri, 17 Jul 2026 14:09:14 +0200
Subject: [PATCH 3/4] fix(ci): restore .nvmrc deleted by mistake

Assisted-by: Claude Code
---
 .nvmrc | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 .nvmrc

diff --git a/.nvmrc b/.nvmrc
new file mode 100644
index 0000000..85e5027
--- /dev/null
+++ b/.nvmrc
@@ -0,0 +1 @@
+22.22.0

From 286ef39f5391fb36aeacf8f37ea4ef8d0a453e17 Mon Sep 17 00:00:00 2001
From: Tomas Kral <git@tomaskral.eu>
Date: Fri, 17 Jul 2026 14:10:10 +0200
Subject: [PATCH 4/4] fix(ci): use .nvmrc for node version across all workflows

Single source of truth for the Node version instead of
hardcoding it in each workflow.

Assisted-by: Claude Code
---
 .github/workflows/pr.yaml      | 4 ++--
 .github/workflows/publish.yaml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index 297cbf3..9c761db 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -21,7 +21,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          node-version: 22
+          node-version-file: '.nvmrc'
 
       - name: yarn install
         run: yarn install --immutable
@@ -72,7 +72,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          node-version: 22
+          node-version-file: '.nvmrc'
 
       - name: yarn install
         run: yarn install --immutable
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index fd44786..09dbe1c 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -31,7 +31,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version-file: '.nvmrc'
 
       - name: Install Dependencies
         run: yarn install --immutable