diff --git a/.github/workflows/release-production-core.yml b/.github/workflows/release-production-core.yml index e6e45eeb15..37f1355048 100644 --- a/.github/workflows/release-production-core.yml +++ b/.github/workflows/release-production-core.yml @@ -6,6 +6,9 @@ on: jobs: build: runs-on: ubuntu-latest + permissions: + contents: read + id-token: write steps: - uses: actions/checkout@v4 - uses: pnpm/action-setup@v4 @@ -13,7 +16,8 @@ jobs: version: 10.28.0 - uses: actions/setup-node@v4 with: - node-version: '22.x' + node-version: '24' + registry-url: https://registry.npmjs.org/ - name: Enable Corepack run: corepack enable @@ -37,6 +41,9 @@ jobs: filename: .github/config/release.json prefix: release + - name: Update npm + run: npm install -g npm@latest + - name: Publishing core (Production) id: publish-core uses: JS-DevTools/npm-publish@v3 @@ -44,6 +51,7 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack/package.json tag: latest + provenance: true - name: Create Core Production Release id: create_release diff --git a/.github/workflows/release-production-platform-plugins.yml b/.github/workflows/release-production-platform-plugins.yml index 69a180c3fb..d4b02588fa 100644 --- a/.github/workflows/release-production-platform-plugins.yml +++ b/.github/workflows/release-production-platform-plugins.yml @@ -6,6 +6,9 @@ on: jobs: build: runs-on: ubuntu-latest + permissions: + contents: read + id-token: write steps: - uses: actions/checkout@v4 - uses: pnpm/action-setup@v4 @@ -13,7 +16,8 @@ jobs: version: 10.28.0 - uses: actions/setup-node@v4 with: - node-version: '22.x' + node-version: '24' + registry-url: https://registry.npmjs.org/ - name: Enable Corepack run: corepack enable @@ -37,6 +41,9 @@ jobs: filename: .github/config/release.json prefix: release + - name: Update npm + run: npm install -g npm@latest + # Utilities - name: Publishing utilities (Production) uses: JS-DevTools/npm-publish@v3 @@ -44,6 +51,7 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-utilities/package.json tag: latest + provenance: true # Command - name: Publishing command (Production) @@ -52,6 +60,7 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-command/package.json tag: latest + provenance: true # Config - name: Publishing config (Production) @@ -60,6 +69,7 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-config/package.json tag: latest + provenance: true # Auth - name: Publishing auth (Production) @@ -68,3 +78,4 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-auth/package.json tag: latest + provenance: true