Skip to content

fix(ci): use Node 24 for npm Trusted Publishers OIDC support#145

Merged
Palbahngmiyine merged 1 commit intosolapi:betafrom
Palbahngmiyine:fix/oidc-npm-version
Apr 16, 2026
Merged

fix(ci): use Node 24 for npm Trusted Publishers OIDC support#145
Palbahngmiyine merged 1 commit intosolapi:betafrom
Palbahngmiyine:fix/oidc-npm-version

Conversation

@Palbahngmiyine
Copy link
Copy Markdown
Member

Summary

npm publish E404 수정: Node 18 (npm 10.8.2)은 Trusted Publishers OIDC를 지원하지 않음.

Root Cause

  • npm Trusted Publishers OIDC token exchange는 npm 11.5.1+ 필요
  • Node 18 → npm 10.8.2 (미지원), Node 24 → npm 11.x+ (지원)
  • Provenance 서명은 Sigstore 기반이라 npm 10에서도 성공했지만, publish 인증은 별도 OIDC exchange

Changes

publish job만 변경 (test/lint job은 Node 18 유지):

  • node-version: 18node-version: 24
  • npm publish --tagnpm publish --provenance --access public --tag

참고: astral-sh/ruff, Effect-TS/effect 등 OIDC 사용 프로젝트의 공통 패턴 적용

🤖 Generated with Claude Code

npm Trusted Publishers OIDC token exchange requires npm CLI 11.5.1+.
Node 18 ships npm 10.8.2 which lacks OIDC support, causing E404 on
publish despite provenance signing succeeding (Sigstore is separate).

Node 24 ships npm 11.x+ with native OIDC support. Only the publish
job is changed — test/lint jobs remain on Node 18 for SDK compatibility.

Also restore --provenance --access public flags per OIDC project
conventions (astral-sh/ruff, Effect-TS/effect).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@gemini-code-assist
Copy link
Copy Markdown

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@Palbahngmiyine Palbahngmiyine merged commit 49a55ed into solapi:beta Apr 16, 2026
8 checks passed
@Palbahngmiyine Palbahngmiyine deleted the fix/oidc-npm-version branch April 16, 2026 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant