feat: enable trusted publishing for release-it #2337
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
All reports are resolved now. Thanks! ✅
|
Owner
Author
|
Ah, this also needed the changes from JoshuaKGoldberg/release-it-action#741. |
2 tasks
|
🎉 This is included in version v2.59.0 🎉 The release is available on: Cheers! 📦🚀 |
3 tasks
JoshuaKGoldberg
added a commit
to flint-fyi/flint
that referenced
this pull request
Jan 3, 2026
## PR Checklist - [x] Addresses an existing open issue: fixes #1239 - [x] That issue was marked as [`status: accepting prs`](https://github.com/flint-fyi/flint/issues?q=is%3Aopen+is%3Aissue+label%3A%22status%3A+accepting+prs%22) - [x] Steps in [CONTRIBUTING.md](https://github.com/flint-fyi/flint/blob/main/.github/CONTRIBUTING.md) were taken ## Overview Applies the same removals as JoshuaKGoldberg/create-typescript-app#2337. * `NPM_TOKEN`: I think trying to use it is what's causing the auth issues * `provenance: true`: no longer necessary ❤️🔥
3 tasks
JoshuaKGoldberg
added a commit
to octoguide/bot
that referenced
this pull request
Jan 5, 2026
## PR Checklist - [x] Addresses an existing open issue: fixes #427 - [x] That issue was marked as [`status: accepting prs`](https://github.com/OctoGuide/bot/issues?q=is%3Aopen+is%3Aissue+label%3A%22status%3A+accepting+prs%22) - [x] Steps in [CONTRIBUTING.md](https://github.com/OctoGuide/bot/blob/main/.github/CONTRIBUTING.md) were taken ## Overview As per JoshuaKGoldberg/create-typescript-app#2337 and JoshuaKGoldberg/create-typescript-app#2339. Also bumps `release-it` to `^19.2.2`, just in case. Noting: @cylewaitforit and I had talked about splitting _publishing_ from _releasing_. Which sounds like a good idea (good call Cyle!). But it doesn't need to block this PR. 🗺️
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
PR Checklist
status: accepting prsOverview
Adopts the same flow as what @michaelfaith set up for ts-api-utils in JoshuaKGoldberg/ts-api-utils#772. That is:
NPM_TOKENsecret (yay! one less manual secret token!)https://www.npmjs.com/package/*/access(darn, still a manual step)npm's settings in.release-it.jsonfrom publish args to the generalskipChecksCo-authored-by: @michaelfaith
🎁