From 0dbc5f9809999ac36e7155f758f3bf66cafd5e8e Mon Sep 17 00:00:00 2001 From: Travis Ralston Date: Thu, 15 Jan 2026 14:08:57 -0700 Subject: [PATCH 1/4] Remove token auth for NPM publishing --- .github/workflows/release.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index eeea393..4895d41 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -143,6 +143,4 @@ jobs: draft: true files: "*.tgz" - name: Publish to npmjs.com - run: npm publish --access public - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} + run: npm publish --access public --provenance From e600f56d69c157cfcf1591375363a3beea43d323 Mon Sep 17 00:00:00 2001 From: Travis Ralston Date: Thu, 15 Jan 2026 16:55:25 -0700 Subject: [PATCH 2/4] Remove more? --- .github/workflows/release.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4895d41..1d7148f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -131,7 +131,6 @@ jobs: node-version: 22 registry-url: https://registry.npmjs.org/ scope: '@matrix-org' - always-auth: true - name: Build lib run: | npm install --ignore-scripts From ab1662a423650068c691b86742eaf076a6967922 Mon Sep 17 00:00:00 2001 From: Travis Ralston Date: Thu, 15 Jan 2026 17:22:56 -0700 Subject: [PATCH 3/4] The robots said upgrade npm, so upgrade npm --- .github/workflows/release.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1d7148f..9896e5c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -131,6 +131,8 @@ jobs: node-version: 22 registry-url: https://registry.npmjs.org/ scope: '@matrix-org' + - name: Upgrade npm for Trusted Publishing + run: npm i -g npm@latest - name: Build lib run: | npm install --ignore-scripts From fdc762191b0fa3ae29a5e10f8ce69c79b40f730a Mon Sep 17 00:00:00 2001 From: Travis Ralston Date: Thu, 15 Jan 2026 18:13:32 -0700 Subject: [PATCH 4/4] git+? --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 0094372..fd5404a 100644 --- a/package.json +++ b/package.json @@ -5,7 +5,7 @@ "types": "index.d.ts", "repository": { "type": "git", - "url": "https://github.com/matrix-org/matrix-sdk-crypto-nodejs" + "url": "git+https://github.com/matrix-org/matrix-sdk-crypto-nodejs" }, "napi": { "name": "matrix-sdk-crypto",