ci: switch npm release workflow to trusted publishing

This commit is contained in:
Onur Solmaz
2026-03-14 13:12:27 +01:00
committed by Onur
parent 61a7f2e7c3
commit 00891dee90
3 changed files with 12 additions and 14 deletions

View File

@@ -94,6 +94,7 @@ Historical note:
- [ ] Confirm git status is clean; commit and push as needed.
- [ ] Confirm npm trusted publishing is configured for the `openclaw` package.
- [ ] Do not rely on an `NPM_TOKEN` secret for this workflow; the publish job uses GitHub OIDC trusted publishing.
- [ ] Push the matching git tag to trigger the preview run in `.github/workflows/openclaw-npm-release.yml`.
- [ ] Run `OpenClaw NPM Release` manually with the same tag to publish after `npm-release` environment approval.
- Stable tags publish to npm `latest`.