mirror of
https://github.com/changesets/action
synced 2026-10-26 16:39:56 +08:00
54220dd92c
* fix: conditionally append NPM_TOKEN to .npmrc for trusted publishing support The .npmrc generation now intelligently handles both traditional NPM token authentication and trusted publishing scenarios: - Only appends auth token to .npmrc when NPM_TOKEN is defined (not undefined) - Uses strict comparison (!== undefined) instead of truthy checks - Provides informative logging when no NPM_TOKEN is present - Maintains full backward compatibility with existing workflows This fixes issues with trusted publishing where OIDC tokens from GitHub Actions are used instead of NPM_TOKEN, preventing 'undefined' from being written to the registry auth configuration. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * Update src/index.ts Co-authored-by: Mateusz Burzyński <mateuszburzynski@gmail.com> * simplify * tweak changeset --------- Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Mateusz Burzyński <mateuszburzynski@gmail.com>
6 lines
362 B
Markdown
6 lines
362 B
Markdown
---
|
|
"@changesets/action": patch
|
|
---
|
|
|
|
The `.npmrc` generation now intelligently handles both traditional NPM token authentication and trusted publishing scenarios by only appending the auth token when `NPM_TOKEN` is defined. This prevents 'undefined' from being written to the registry configuration when using OIDC tokens from GitHub Actions trusted publishing.
|