mpyw / FILTER_VALIDATE_EMAIL.js / 29547459816 / 1

100%

master: 100%

push

github

ci: publish to npm via Trusted Publishing (OIDC) (#20)

The v2.0.0 release failed with ENEEDAUTH because no NPM_TOKEN secret exists.
Switch to npm Trusted Publishing instead of a long-lived token:

- add `permissions: id-token: write` so the job can mint an OIDC token
- upgrade to npm >= 11.5.1 (setup-node bundles an older npm) for OIDC support
- drop the `NODE_AUTH_TOKEN` / `secrets.NPM_TOKEN` env from `npm publish`

Auth now comes from the OIDC token exchanged with the trusted publisher
configured on npmjs.org, and provenance attestation is generated automatically.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

8 of 8 branches covered (100.0%)

Branch coverage included in aggregate %.

8 of 8 relevant lines covered (100.0%)

79.25 hits per line