language-tools
language-tools copied to clipboard
chore: publish to npm with OIDC
update the release to publish to npm with OIDC, Lerna-Lite (which I maintain) supports OIDC. Publishing with OIDC has multiple advantages, it publishes with Provenance, it also uses short lived token which is also much better for security and finally you no longer need an npm token.
Please note that you will also have to enable Trusted Published for each package of the monorepo, for example below is one of Lerna-Lite package.
For more info, see https://github.com/e18e/ecosystem-issues/issues/201
Please don't merge this PR unless you have already updated each package to use Trusted Published as shown below. I assume that you could give it a try with --dry-run mode to test it out afterward.