Jeremy Tuloup

Maybe it could be worth trying the npm trusted publishers with Jupyter Notebook first: https://github.com/jupyter/notebook Since it has less packages to publish to npm (12 currently), and could be configured...

> Unless there is a way to automate this? > Since it has less packages to publish to npm (12 currently), and could be configured by hand. Just finished setting...

For reference, notebook 7.5.0b1 was released with npm trusted publishers on: https://github.com/jupyter/notebook/issues/7745#issuecomment-3420851938 After updating the releaser workflow to use Node 24 / npm 11 explicitly with https://github.com/jupyter/notebook/pull/7749 while waiting for...

> I have to manually configure trusted publishing for these 4 packages. Currently it seems to be the only option on npmjs, which can indeed be tedious when there are...

- The releaser now supports npm 11: https://github.com/jupyter-server/jupyter_releaser/pull/618 - The base setup action is now using Node 24 / npm 11: https://github.com/jupyterlab/maintainer-tools/pull/264 So we should be able to move forward...

Here is the list of packages to configure on `npm`. If folks feel like helping configuring some of these packages, please feel free to check the corresponding checkbox below: ##...

All packages should be configured now.

Next steps: - Delete the `NPM_TOKEN` secret from the repo - Make a new release of JupyterLab - Clean up: - remove the bot account from the repo - go...

JupyterLab 4.5.1 was released with the npm trusted publishers enabled: https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.1 So the last part of this process is to go through all the packages again, and enable the strictest...

The `4.6.0a0` release went fine, except for the `after-publish-assets` step running `npm dist-tag` commands: Looks like it's a current limitation with the npm trusted publishers: https://github.com/npm/cli/issues/8547. So maybe we still...