eclipsesource / jsonforms / 18776343658

83%

push

github

ci: Adapt publish.yaml to use npm's trusted publishing

- Add comment to clarify id-token: write permission
- Remove obsolete usage of NPM auth token
- Add npm scope and move up pnpm setup in publish workflow
  - Authentication via OIDC for NPM's trusted publishing may need to explicitly define
    scope if it doesn't match the repository owner.
    This is the case here because the repository owner is eclipsesource.
  - Move pnpm setup before node setup to avoid pnpm overriding .npmrc changes
    done by node setup for trusted publishing
- Add always-auth option to node setup to force auth after pnpm setup

10809 of 28938 branches covered (37.35%)

18646 of 22520 relevant lines covered (82.8%)

32.96 hits per line