From 9b167cdb63c494dbbec8f6447c028ba21e8d0d15 Mon Sep 17 00:00:00 2001 From: Yaacov Rydzinski Date: Wed, 4 Mar 2026 11:35:26 +0200 Subject: [PATCH] internal: pin node version for release action npm trusted publishing requires a newer Node/npm line than 16.x.x pinning to node v24, latest LTS version --- .github/workflows/release.yml | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e90f2f8b39..190389bd9f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -93,18 +93,15 @@ jobs: runs-on: ubuntu-latest environment: release permissions: - contents: read # for actions/checkout + contents: read # keep token scopes minimal id-token: write # for npm trusted publishing via OIDC steps: - - name: Checkout repo - uses: actions/checkout@v4 - with: - persist-credentials: false - - name: Setup Node.js uses: actions/setup-node@v4 with: - node-version-file: '.node-version' + # npm trusted publishing requires a newer Node/npm line than 16.x.x + # branch runtime constraints, so pin only this job to Node 24. + node-version: 24 - name: Download npmDist package uses: actions/download-artifact@v4