DOPS-1719 Implement npmjs publishing using OIDC, try manual token exhange

Author: dm3ch

.github/workflows/release.yml

@@ -29,16 +29,24 @@ jobs:
           cat <<< $(jq -r ".version=\"$PACKAGE_VERSION\"" package.json) > package.json
           cat package.json
 
-      - name: Install dependencies
-        run: yarn install --frozen-lockfile
+      # - name: Install dependencies
+      #   run: yarn install --frozen-lockfile
 
-      - name: Build
-        run: yarn build
+      # - name: Build
+      #   run: yarn build
+
+      # Workaround for old version of package managers (like yarn v1) that do not support OIDC natively
+      - name: Exchange OIDC token for short-lived npm token
+        id: exchange
+        run: |
+          PKG_NAME=$(jq -r .name package.json)
+          curl -v -sSL -H "Authorization: Bearer $ID_TOKEN" "https://registry.npmjs.org/-/npm/v1/oidc/token/exchange/package/${PKG_NAME}
 
-      - name: Publish
-        # Use NPM since npmjs OIDC requires support in package manager
-        run: npm publish
-        working-directory: dist
+      # - name: Publish
+      #   run: yarn publish
+      #   working-directory: dist
+      #   env:
+      #     NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   publish-to-github:
     runs-on: ubuntu-latest
@@ -69,8 +77,8 @@ jobs:
       - name: Build
         run: yarn build
 
-      - name: Publish
-        run: yarn publish
-        working-directory: dist
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      # - name: Publish
+      #   run: yarn publish
+      #   working-directory: dist
+      #   env:
+      #     NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package.json

@@ -1,6 +1,6 @@
 {
     "name": "@1inch/multicall",
-    "version": "2.0.3",
+    "version": "2.0.4",
     "description": "High-weight optimized call-processor",
     "repository": {
         "type": "git",