Skip to content

Conversation

@lloyd-cio
Copy link
Contributor

@lloyd-cio lloyd-cio commented Nov 20, 2025

This PR converts the existing GitHub Action (GHA) workflow to use npmjs.com 's preferred authentication method (OIDC) to publish. "Classic tokens" that are currently configured (and dropped in this PR) will no longer work as of earlier this week.

I have manually tested this configuration works - published (then unpublished) a test version to the package managed by this repo.

Note - npmjs.com only allows a single GHA file to be configured to publish via OIDC configs, so I have dropped the manual publish step (and its script) in this repo. Please comment if this is a concern.

Note

Switches npm publish to OIDC in the deploy workflow, updating permissions and deploy steps to publish directly with npm.

  • CI/CD:
    • Workflow /.github/workflows/deploy-sdk.yml:
      • Enable OIDC by adding permissions.id-token: write.
      • Update deploy-npm job:
        • Set environment: release and configure actions/setup-node with registry-url.
        • Install latest npm (for OIDC), then npm ci, run pre-deploy, and npm publish --tag latest.
        • Remove token/script-based publish (NPM_TOKEN, ./scripts/deploy-code.sh) in favor of direct publish.

Written by Cursor Bugbot for commit 12daa5c. This will update automatically on new commits. Configure here.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 20, 2025

Sample app builds 📱

Below you will find the list of the latest versions of the sample apps. It's recommended to always download the latest builds of the sample apps to accurately test the pull request.


  • Android APN: 542.5.0 (29394689)
  • iOS FCM: 542.5.0 (29394689)

@lloyd-cio lloyd-cio changed the title DX-809 update to use preferred OIDC for npm publish in github actions (auth): DX-809 update to use preferred OIDC for npm publish in github actions Nov 20, 2025
@lloyd-cio lloyd-cio changed the title (auth): DX-809 update to use preferred OIDC for npm publish in github actions (chore): DX-809 update to use preferred OIDC for npm publish in github actions Nov 20, 2025
@lloyd-cio lloyd-cio changed the title (chore): DX-809 update to use preferred OIDC for npm publish in github actions chore(DX-809): update to use preferred OIDC for npm publish in github actions Nov 20, 2025
@lloyd-cio lloyd-cio merged commit d1efbf3 into main Nov 24, 2025
17 checks passed
@lloyd-cio lloyd-cio deleted the DX-809 branch November 24, 2025 21:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants