petersolopov / yace / 28542285936

100%

push

github

ci: modernize workflow and publish to npm via trusted publishing (OIDC)

Replace the revoked NPM_TOKEN classic-token auth (npm revoked all classic
tokens on 2025-12-09) with OIDC trusted publishing: no long-lived token, no
rotation, automatic provenance. Bump the toolchain to current LTS (Node 22/24,
checkout@v4, setup-node@v4, coverallsapp@v2) and grant id-token: write on the
publish job. Requires a GitHub Actions trusted publisher configured for the
yace package on npmjs.com.

52 of 54 branches covered (96.3%)

Branch coverage included in aggregate %.

355 of 355 relevant lines covered (100.0%)

15.48 hits per line