diff --git a/.github/actions/setup-tools/action.yml b/.github/actions/setup-tools/action.yml index 9182cd6..551e34a 100644 --- a/.github/actions/setup-tools/action.yml +++ b/.github/actions/setup-tools/action.yml @@ -7,7 +7,11 @@ runs: - name: Install Node.js uses: actions/setup-node@v4 with: - node-version: 23 + node-version: 24 # semantic-release requires at least this version, or 22 LTS + # Ensure npm 11.5.1 or later is installed for Trusted publishing + - name: Update npm + shell: bash + run: npm install -g npm@latest - name: Install dependencies shell: bash run: npm i \ No newline at end of file diff --git a/.github/workflows/release_plugin.yml b/.github/workflows/release_plugin.yml index 819e6ac..2e7a27c 100644 --- a/.github/workflows/release_plugin.yml +++ b/.github/workflows/release_plugin.yml @@ -11,7 +11,7 @@ permissions: contents: write issues: write deployments: write - id-token: write # to enable use of OIDC for npm provenance + id-token: write # to enable use of OIDC for npm provenance and trusted publishing jobs: setup: @@ -46,7 +46,6 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.CAP_GH_RELEASE_TOKEN }} GH_TOKEN: ${{ secrets.CAP_GH_RELEASE_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }} run: npx semantic-release publish-android: diff --git a/package.json b/package.json index 3442383..1a35a2d 100644 --- a/package.json +++ b/package.json @@ -58,13 +58,14 @@ "@semantic-release/changelog": "^6.0.3", "@semantic-release/exec": "^7.1.0", "@semantic-release/git": "^10.0.1", - "@semantic-release/github": "^11.0.1", - "@semantic-release/npm": "^12.0.1", + "@semantic-release/github": "^12.0.0", + "@semantic-release/npm": "^13.1.1", "eslint": "^8.57.0", "prettier": "~2.3.0", "prettier-plugin-java": "~1.0.2", "rimraf": "^6.0.1", "rollup": "^4.26.0", + "semantic-release": "^25.0.1", "swiftlint": "^1.0.1", "typescript": "~4.1.5" },