Repository navigation
Migrate NPM workflows to Trusted Publishing #99
Description
We need to migrate NPM releases to https://docs.npmjs.com/trusted-publishers and deprecate NPM Tokens.
Trusted publishing requires npm CLI version 11.5.1 or later.
We need to identify the dependencies and work needed to be done to upgrade to these versions.
Affected workflows:
./hyperledger/firefly-sdk-nodejs/.github/workflows/release.yml
./hyperledger/firefly-sdk-nodejs/.github/workflows/setlatest.yml
Reacted by Enrique Lacal
Metadata
Metadata
Assignees
Labels
No labels
Activity
Modify release workflow to include permissions and npm update
annamcallister commentedon Dec 17, 2025
LFDT-Paladin/paladin#979 calls out some of the unexpected work we had to do to fully support trusted publishing for Paladin- it goes beyond the changes already made in #100.
ryjones commentedon Sep 15, 2026
@annamcallister #121 missed the URLs in lines 24 and 26 which blocks trusted publishing
annamcallister commentedon Sep 15, 2026
#124 - this fixes the repo names- I only changed the org name in that PR. Is this what you meant by missed @ryjones?
ryjones commentedon Sep 15, 2026
yup, looks good