feat: support npm publish --provenance

pnpm/pnpm#6435
node-modules · May 29, 2023 · d20b59c · d20b59c
1 parent 8d2469e
commit d20b59c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/workflows/node-release.yml b/.github/workflows/node-release.yml
@@ -33,6 +33,8 @@ on:
 
 jobs:
   Release:
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     defaults:
       run:
@@ -83,6 +85,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           DRYRUN: ${{ inputs.dryRun }}
+          NPM_CONFIG_PROVENANCE: true
 
       - name: Publish ${{ steps.release.outputs.name }}@${{ steps.release.outputs.release_version }}
         if: steps.release.outputs.release_version && !inputs.dryRun

diff --git a/scripts/release/index.js b/scripts/release/index.js
@@ -43,7 +43,7 @@ async function run() {
       core.setOutput('release_version', nextRelease.version);
 
       // cnpm sync
-      const res = await request(`https://registry-direct.npmmirror.com/-/package/${pkgInfo.name}/syncs`, { method: 'PUT' });
+      const res = await request(`https://registry.npmmirror.com/-/package/${pkgInfo.name}/syncs`, { method: 'PUT' });
       const { id } = await res.body.json();
       const logUrl = `https://registry.npmmirror.com/-/package/${pkgInfo.name}/syncs/${id}/log`;
       core.setOutput('cnpm_sync_url', logUrl);