Skip to content

Publish beeper-cli to npm from GitHub Actions - #58

Merged
indent[bot] merged 2 commits into
mainfrom
iFixRobots/npm-trusted-publishing
Oct 30, 2026
Merged

indent[bot] merged 2 commits into
mainfrom
iFixRobots/npm-trusted-publishing

Conversation

@iFixRobots

@iFixRobots iFixRobots commented Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Publishes beeper-cli to npm from GitHub Actions using npm trusted publishing (OIDC), like the @beeper/* packages. No npm token is stored and nothing is published from a local machine.

publish-npm.yml runs when a GitHub release is published, or manually with a tag. It downloads that release's binaries.json, checks that the versions match the tag and that all four binaries are listed, builds packages/npm, and runs npm stage publish. A maintainer approves the staged version on npmjs.com before it goes live.

packages/npm/package.json gets a repository field, which npm needs for the provenance attestation.

View in Indent
Tag @indent to continue the conversation here.

@indent
indent Bot merged commit e73e6ab into main Oct 30, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant