Skip to content

Fix nightly publishing with npm trusted publisher - #252

Merged
cortinico merged 1 commit into
mainfrom
fix/nightly-trusted-publishing
Sep 21, 2026
Merged

cortinico merged 1 commit into
mainfrom
fix/nightly-trusted-publishing

Conversation

@cortinico

Copy link
Copy Markdown
Member

Summary

  • migrate the nightly npm publication from the expired NPM_TOKEN flow to trusted publishing
  • grant the job OIDC token permission and use the npm-publish environment
  • update actions/setup-node so the workflow has an npm version that supports trusted publishing

This fixes the repeated E404 publication failures, including https://github.com/react-native-community/template/actions/runs/34980498247. The npm package now trusts both release.yaml and nightly.yaml with the npm-publish environment.

Test plan

  • yarn prettier --check .github/workflows/nightly.yaml
  • parse .github/workflows/nightly.yaml with Ruby YAML
  • yarn test --runInBand scripts/__tests__/package_json-test.js

@cortinico
cortinico marked this pull request as ready for review September 21, 2026 13:32
@cortinico
cortinico merged commit 370350e into main Sep 21, 2026
1 check passed
@cortinico
cortinico deleted the fix/nightly-trusted-publishing branch September 21, 2026 13:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants