conventional-changelog / conventional-changelog / 37352497053

86%

push

github

ci: publish through npm trusted publishing (#1560)

The release job authenticates to npm through OIDC: it gets `id-token: write` and no
`npm-token`, and `actions/setup-node` no longer takes `registry-url`, whose placeholder
`_authToken` in `.npmrc` would shadow the OIDC flow. pnpm 12 exchanges the token itself,
and the npm of Node.js 26 from `.tool-versions` is newer than the 11.5.1 that trusted
publishing needs. The release job lists `contents: write` too, since a job with
permissions gets no others.

791 of 1027 branches covered (77.02%)

1143 of 1325 relevant lines covered (86.26%)

81909.23 hits per line