From 139f5b4278fd3c24e133ae24b1cb987d89c3b884 Mon Sep 17 00:00:00 2001 From: yazmorukyaz Date: Sat, 6 Jun 2026 16:53:40 +0300 Subject: [PATCH 1/2] fix: pin trusted publishing workflow runtime --- .github/workflows/publish.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index b6a6cd8..e67b66a 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,9 +20,10 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 22.14.0 registry-url: https://registry.npmjs.org - cache: npm + - run: npm install -g npm@11.5.1 + - run: npm --version - run: npm ci - run: npm run build - run: npm test From 9010fe7bb61135b187b13c614b0c9baa5c62d965 Mon Sep 17 00:00:00 2001 From: yazmorukyaz Date: Sat, 6 Jun 2026 17:26:04 +0300 Subject: [PATCH 2/2] chore: assert npm version in publish workflow --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index e67b66a..d1cba8f 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -23,7 +23,7 @@ jobs: node-version: 22.14.0 registry-url: https://registry.npmjs.org - run: npm install -g npm@11.5.1 - - run: npm --version + - run: test "$(npm --version)" = "11.5.1" - run: npm ci - run: npm run build - run: npm test