From e009f6a09d87848d58eb106a7508906957ec6a19 Mon Sep 17 00:00:00 2001 From: James Kebinger Date: Thu, 20 Nov 2025 16:53:54 -0600 Subject: [PATCH] chore: update to yarn 4.11.0 and configure for trusted publisher MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Update yarn from 4.9.2 to 4.11.0 (required for npm trusted publisher) - Remove --provenance flag from publish commands (handled by .yarnrc.yml) - Remove npmAuthToken from .yarnrc.yml (using OIDC instead) - Keep npmPublishProvenance: true in .yarnrc.yml for automatic provenance 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- .github/workflows/release.yaml | 6 +++--- .yarnrc.yml | 2 +- package.json | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 201105a..adc4ee1 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -63,7 +63,7 @@ jobs: - name: enable corepack run: | corepack enable - corepack prepare yarn@4.9.2 --activate + corepack prepare yarn@4.11.0 --activate - name: cache yarn dependencies uses: actions/cache@v4 with: @@ -76,9 +76,9 @@ jobs: - name: Publish to npm run: | if [ "${{ needs.check-version.outputs.is-prerelease }}" == "true" ]; then - yarn npm publish --provenance --access public --tag ${{ needs.check-version.outputs.npm-tag }} + yarn npm publish --access public --tag ${{ needs.check-version.outputs.npm-tag }} else - yarn npm publish --provenance --access public + yarn npm publish --access public fi create-release: diff --git a/.yarnrc.yml b/.yarnrc.yml index 45a70b4..82afd3d 100644 --- a/.yarnrc.yml +++ b/.yarnrc.yml @@ -1,3 +1,3 @@ nodeLinker: node-modules +npmPublishProvenance: true npmRegistryServer: 'https://registry.npmjs.org' -npmAuthToken: '${NPM_AUTH_TOKEN}' diff --git a/package.json b/package.json index 05ccb2d..ffbd45c 100644 --- a/package.json +++ b/package.json @@ -1,5 +1,5 @@ { - "packageManager": "yarn@4.9.2", + "packageManager": "yarn@4.11.0", "name": "@reforge-com/node", "version": "0.1.0", "description": "Feature Flags, Live Config, and Dynamic Log Levels",