C9S/parser2
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 10 Wiki Activity

release: публикация npm через NODE_AUTH_TOKEN (Gitea не выдаёт OIDC) #4

Merged
claude merged 1 commits from fix/release-npm-token into main 2026-05-28 05:56:17 +00:00
Conversation 0 Commits 1 Files Changed 1
+9 -9

1 Commits

Author SHA1 Message Date
coopops c5dc3ca799 release: публикация npm через NODE_AUTH_TOKEN, без OIDC/provenance
CI / Lint (pull_request) Successful in 9m49s
Details
CI / Typecheck (pull_request) Successful in 9m24s
Details
CI / Unit tests (pull_request) Successful in 9m36s
Details
CI / Integration tests (pull_request) Successful in 9m48s
Details
CI / Build (pull_request) Successful in 9m26s
Details 
lerna publish падал в Gitea Actions:
  EUSAGE Provenance generation in GitHub Actions requires "write" access
  to the "id-token" permission
Permission в workflow выставлен, но Gitea Actions не выдаёт OIDC id-token
(это GitHub-специфичный механизм) — поэтому ни provenance, ни trusted
publishing работать не будут. Переключаемся на классический auth:
NODE_AUTH_TOKEN=NPM_TOKEN (actions/setup-node прописал .npmrc с шаблоном
${NODE_AUTH_TOKEN}). Снят NPM_CONFIG_PROVENANCE и id-token: write.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-28 05:55:17 +00:00