-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Description
Is your task related to a problem? Please describe
npmjs recently revoked all previous tokens, context in this blogpost:
https://github.blog/changelog/2025-12-09-npm-classic-tokens-revoked-session-based-auth-and-cli-token-management-now-available/
We had to re-generate new variants of tokens, that have more limited scopes and lifetimes, which means we will have to do it repeatedly every time the tokens expire, and break the release pipeline, which now will be more often.
Describe the solution you'd like
We could use the workflows, proposed in the same blogpost, to configure the release pipelines for Trusted Publishing, which seems like a better approach.
https://docs.npmjs.com/trusted-publishers
Describe alternatives you've considered
keep using the current system and reset tokens.
OR
consider stopping publishing all/some artifacts to npmjs, if there's no need for it anymore
Additional context
No response
Metadata
Metadata
Assignees
Labels
Type
Projects
Status