Merge pull request #97 from hypothesis/trusted-publishing

Trusted publishing

Author: acelaya

.github/workflows/npm-publish.yml

@@ -3,6 +3,12 @@ on:
   release:
     types:
       - published
+
+# Trusted publishing configuration. See https://docs.npmjs.com/trusted-publishers
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build-and-publish-package:
     runs-on: ubuntu-latest
@@ -12,13 +18,11 @@ jobs:
     - name: Setup Nodejs
       uses: actions/setup-node@v4
       with:
-        node-version: '16'
+        node-version: '24'
         registry-url: 'https://registry.npmjs.org'
     - name: Install
       run: yarn install --immutable
     - name: Build
       run: yarn build
     - name: Publish package
       run: npm publish --access public
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -5,7 +5,10 @@
   "type": "module",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",
-  "repository": "https://github.com/hypothesis/frontend-testing",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hypothesis/frontend-testing.git"
+  },
   "author": "Hypothesis Developers <[email protected]>",
   "license": "BSD-2-Clause",
   "packageManager": "[email protected]",