Skip to content

Conversation

@peteski22
Copy link
Contributor

Problem

npm trusted publishing was failing with:

  • ✅ Provenance signing successful
  • ❌ Package publish failing with 404/auth errors

Root Cause

GitHub-hosted runners ship with npm 10.x, but npm trusted publishing requires npm CLI v11.5.1 or later.

Solution

  1. Added step to upgrade npm to latest version before publishing
  2. Restored registry-url to setup-node for proper .npmrc configuration

Testing

After merging, will delete and recreate v0.0.2 release to verify trusted publishing works.

References

GitHub runners have npm 10.x but trusted publishing requires npm 11.5.1+.
Also restore registry-url to setup-node for proper .npmrc configuration.
@peteski22 peteski22 merged commit 3d1fee2 into main Oct 20, 2025
2 checks passed
@peteski22 peteski22 deleted the peteski22/fix-npm-trusted-publishing branch October 20, 2025 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants