From 09dc3a31e781fed3b532f238753cbce7cd454bd7 Mon Sep 17 00:00:00 2001 From: slit Date: Thu, 22 Jan 2026 21:37:18 -0800 Subject: [PATCH] fix(npm): use NPM_TOKEN for npm publish authentication The npm package @gastown/gt was never published because the release workflow used OIDC trusted publishing which requires initial manual setup on npm.org. Changed to use NPM_TOKEN secret for authentication. Also added npm install option to README. Fixes #867 Co-Authored-By: Claude Opus 4.5 --- .github/workflows/release.yml | 10 +++++----- README.md | 3 ++- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 454cfc54..43d2231a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -60,15 +60,15 @@ jobs: node-version: '22' registry-url: 'https://registry.npmjs.org' - - name: Update npm for OIDC trusted publishing - run: npm install -g npm@latest # Requires npm >= 11.5.1 for trusted publishing + - name: Update npm for provenance support + run: npm install -g npm@latest - name: Publish to npm + env: + NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} run: | cd npm-package - npm publish --access public - # Uses OIDC trusted publishing - no token needed - # Provenance attestations are automatic with trusted publishing + npm publish --access public --provenance update-homebrew: runs-on: ubuntu-latest diff --git a/README.md b/README.md index 4b66454e..d3ef1543 100644 --- a/README.md +++ b/README.md @@ -97,7 +97,8 @@ Git-backed issue tracking system that stores work state as structured data. ```bash # Install Gas Town -$ brew install gastown # Homebrew +$ brew tap steveyegge/gastown && brew install gt # Homebrew (recommended) +$ npm install -g @gastown/gt # npm $ go install github.com/steveyegge/gastown/cmd/gt@latest # From source # If using go install, add Go binaries to PATH (add to ~/.zshrc or ~/.bashrc)