Skip to content

fix: update CI pipeline, Node 26.x, OIDC npm auth, fix broken badges - #9

Open
Farenheith wants to merge 1 commit into
masterfrom
fix/badges-and-pipeline
Open

fix: update CI pipeline, Node 26.x, OIDC npm auth, fix broken badges#9
Farenheith wants to merge 1 commit into
masterfrom
fix/badges-and-pipeline

Conversation

@Farenheith

@Farenheith Farenheith commented Aug 15, 2026

Copy link
Copy Markdown
Member

Summary

Fixes broken README badges and updates GitHub Actions workflows to latest versions.

Badges Fixed

  • Removed CodeClimate badges (service shut down, returns 500)
  • Removed david-dm.org badges (service decommissioned)
  • Kept working Action badges and npm version badge from badge.fury.io

Pipeline Updates

  • Updated actions/checkout to v7 (latest: v7.0.1)
  • Updated actions/setup-node to v7 (latest: v7.0.0)
  • Updated supercharge/redis-github-action to v1.8.1 (latest: 1.8.1)
  • Upgraded Node.js from 14.x (EOL) to Node 26.x (latest LTS, v26.7.0) across all workflows
  • Removed CodeClimate coverage action (service shut down, downloads return 404)
  • Added modern permissions block with id-token: write

Semantic Release — OIDC Only

Replaced NPM_TOKEN secret with proper OIDC token exchange for npm authentication:

  1. Request scoped OIDC token from GitHub Actions (audience=https://registry.npmjs.org)
  2. Exchange it for an npm access token via /-/npm/v1/oauth/token
  3. Write short-lived token to ~/.npmrc

This eliminates the need to store a long-lived NPM_TOKEN secret — token is generated on-demand and expires automatically.

@Farenheith
Farenheith force-pushed the fix/badges-and-pipeline branch 3 times, most recently from 0861992 to dfa1208 Compare August 15, 2026 04:13
@Farenheith Farenheith changed the title fix: update CI pipeline and fix broken README badges fix: update CI pipeline, Node 26, OIDC npm auth, fix broken badges Aug 15, 2026
@Farenheith
Farenheith force-pushed the fix/badges-and-pipeline branch from dfa1208 to 5bfcc8f Compare August 15, 2026 04:41
@Farenheith Farenheith changed the title fix: update CI pipeline, Node 26, OIDC npm auth, fix broken badges fix: update CI pipeline, Node 26.x, OIDC npm auth, fix broken badges Aug 15, 2026
- Update GitHub Actions to v4 (checkout, setup-node)
- Upgrade Node.js from 14.x to 20.x across all workflows
- Modernize semantic-release workflow with permissions and id-token
- Replace dead CodeClimate badges (service shutdown) with working Action badges
- Remove broken david-dm.org badges (service shut down)
- Keep functional npm version badge from badge.fury.io
@Farenheith
Farenheith force-pushed the fix/badges-and-pipeline branch from 5bfcc8f to 9f6b13f Compare August 15, 2026 05:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant