Skip to content

Conversation

@JaysonGCS
Copy link
Contributor

@JaysonGCS JaysonGCS commented Dec 19, 2025

Description

Temporarily disabling OIDC authentication in the release workflow by commenting out the id-token: write permission.

Changes Made

  • Commented out id-token: write permission in .github/workflows/release.yml
  • This disables npm provenance via OIDC authentication
  • Easy to re-enable by uncommenting the line

Definition of Done

  • All automated tests have passed successfully.
  • All new and existing code adheres to our project's coding standards.

Additional Notes

This is a temporary change. To re-enable OIDC, simply uncomment the id-token: write line in the release workflow.

@JaysonGCS JaysonGCS changed the title chore: temporarily disable OIDC in release workflow [MAINTENANCE] Temporarily disable OIDC in release workflow Dec 19, 2025
Commented out id-token permission to disable npm provenance via OIDC authentication.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: “JaysonGCS“ <goh.chung.sern@gmail.com>
@JaysonGCS JaysonGCS merged commit bac8746 into main Dec 19, 2025
1 check passed
@JaysonGCS JaysonGCS deleted the disable-oidc-temp branch December 19, 2025 17:10
@github-actions
Copy link

🎉 This PR is included in version 1.0.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

JaysonGCS added a commit that referenced this pull request Dec 20, 2025
JaysonGCS added a commit that referenced this pull request Dec 20, 2025
This reverts commit bac8746.

Signed-off-by: “JaysonGCS“ <goh.chung.sern@gmail.com>
JaysonGCS added a commit that referenced this pull request Dec 20, 2025
* Revert "fix: resolve npm auth issues after OIDC disable (#21)"

This reverts commit 90d89f5.

Signed-off-by: “JaysonGCS“ <goh.chung.sern@gmail.com>

* Revert "chore: temporarily disable OIDC in release workflow (#20)"

This reverts commit bac8746.

Signed-off-by: “JaysonGCS“ <goh.chung.sern@gmail.com>

* chore: remove npm token in release env

Signed-off-by: “JaysonGCS“ <goh.chung.sern@gmail.com>

---------

Signed-off-by: “JaysonGCS“ <goh.chung.sern@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants