Skip to content

Conversation

@sarahdayan
Copy link
Member

@sarahdayan sarahdayan commented Feb 3, 2026

Summary

  • Add useOidcTokenProvider config option that skips npm config set for the auth token
  • When enabled, allows publishing with npm's OIDC trusted publishing (e.g., via GitHub Actions' native npm publishing)

Closes #1014

Sarah Dayan and others added 2 commits February 3, 2026 15:21
Add support for npm's OIDC trusted publishing by skipping the
npm config set step when useOidcTokenProvider is enabled.

Co-Authored-By: Claude Opus 4.5 <[email protected]>
@sarahdayan sarahdayan requested review from a team, Haroenv, aymeric-giraudet and dhayab and removed request for a team February 3, 2026 14:25
Copy link
Member

@dhayab dhayab left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. Could be worth checking for or repeating the need to set

permissions:
  id-token: write  # Required for OIDC
  contents: read

in the GitHub action. Maybe updating the page at https://community.algolia.com/shipjs/guide/getting-started.html#setup-github-actions ?

Copy link
Contributor

@Haroenv Haroenv left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good but needs doc indeed

@sarahdayan sarahdayan requested review from Haroenv and dhayab February 3, 2026 16:32
@sarahdayan
Copy link
Member Author

Added!

@sarahdayan sarahdayan merged commit b54d736 into main Feb 3, 2026
2 checks passed
@sarahdayan sarahdayan deleted the feat/oidc branch February 3, 2026 17:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Work with OIDC authentication

4 participants