yyc1217 / twzipcode-vue / 26703834631

92%

master: 92%

Pull #339

github

CI: publish to npm via trusted publishing (OIDC)

Replace token-based publishing with npm trusted publishing so releases no
longer depend on a stored npm token (which expired and caused 404s) or 2FA
prompts:
- Add `permissions: id-token: write` so the job can mint an OIDC token.
- Upgrade the npm CLI to >= 11.5.1 (required for trusted publishing).
- `npm publish` with no NODE_AUTH_TOKEN; npm authenticates via OIDC and
  attaches provenance automatically.

Requires a one-time trusted publisher configured on npmjs.com for this repo
and the workflow file (.github/workflows/actions.yml).

37 of 38 branches covered (97.37%)

Branch coverage included in aggregate %.

237 of 260 relevant lines covered (91.15%)

937.98 hits per line