Tabish Bidiwale 6de04f3b2b feat(ci): migrate to npm OIDC trusted publishing (#390) ...

Replace classic npm token authentication with OIDC trusted publishing:

- Add `id-token: write` permission for OIDC token generation
- Upgrade to Node 24 (includes npm 11.5.1+ required for OIDC)
- Remove NPM_TOKEN/NODE_AUTH_TOKEN env vars (OIDC replaces them)

This eliminates the need for rotating npm access tokens and provides
cryptographically verified publisher identity with automatic provenance
attestation.

Requires configuring trusted publisher on npmjs.com:
- Organization: Fission-AI
- Repository: OpenSpec
- Workflow: release-prepare.yml

2025-12-22 20:10:27 +11:00

..

workflows

feat(ci): migrate to npm OIDC trusted publishing (#390)

2025-12-22 20:10:27 +11:00

CODEOWNERS

chore: add codeowners (#72)

2025-09-19 11:56:37 +10:00