From 07f0d4f1e0af1815c1ecb730fbc56380cd38ee6a Mon Sep 17 00:00:00 2001 From: Saket Aryan Date: Mon, 6 Apr 2026 17:22:00 +0530 Subject: [PATCH] fix: use npx npm@latest for OIDC trusted publishing (#4724) Co-authored-by: Claude Opus 4.6 (1M context) --- .github/workflows/cli-node-cd.yml | 4 ++-- .github/workflows/openclaw-cd.yml | 4 ++-- .github/workflows/ts-sdk-cd.yml | 4 ++-- .github/workflows/vercel-ai-cd.yml | 4 ++-- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/cli-node-cd.yml b/.github/workflows/cli-node-cd.yml index 4852623b9..c583abb52 100644 --- a/.github/workflows/cli-node-cd.yml +++ b/.github/workflows/cli-node-cd.yml @@ -40,7 +40,7 @@ jobs: run: | if [ "${{ github.event.release.prerelease }}" = "true" ]; then PREID=$(node -p "require('./package.json').version.split('-')[1].split('.')[0]") - npm publish --provenance --access public --tag "$PREID" + npx npm@latest publish --provenance --access public --tag "$PREID" else - npm publish --provenance --access public + npx npm@latest publish --provenance --access public fi diff --git a/.github/workflows/openclaw-cd.yml b/.github/workflows/openclaw-cd.yml index 5b9d3ae94..8a0d0e7e0 100644 --- a/.github/workflows/openclaw-cd.yml +++ b/.github/workflows/openclaw-cd.yml @@ -40,7 +40,7 @@ jobs: run: | if [ "${{ github.event.release.prerelease }}" = "true" ]; then PREID=$(node -p "require('./package.json').version.split('-')[1].split('.')[0]") - npm publish --provenance --access public --tag "$PREID" + npx npm@latest publish --provenance --access public --tag "$PREID" else - npm publish --provenance --access public + npx npm@latest publish --provenance --access public fi diff --git a/.github/workflows/ts-sdk-cd.yml b/.github/workflows/ts-sdk-cd.yml index 299aed87b..8b7202ee9 100644 --- a/.github/workflows/ts-sdk-cd.yml +++ b/.github/workflows/ts-sdk-cd.yml @@ -40,7 +40,7 @@ jobs: run: | if [ "${{ github.event.release.prerelease }}" = "true" ]; then PREID=$(node -p "require('./package.json').version.split('-')[1].split('.')[0]") - npm publish --provenance --access public --tag "$PREID" + npx npm@latest publish --provenance --access public --tag "$PREID" else - npm publish --provenance --access public + npx npm@latest publish --provenance --access public fi diff --git a/.github/workflows/vercel-ai-cd.yml b/.github/workflows/vercel-ai-cd.yml index 9b43d3ccd..172afc288 100644 --- a/.github/workflows/vercel-ai-cd.yml +++ b/.github/workflows/vercel-ai-cd.yml @@ -40,7 +40,7 @@ jobs: run: | if [ "${{ github.event.release.prerelease }}" = "true" ]; then PREID=$(node -p "require('./package.json').version.split('-')[1].split('.')[0]") - npm publish --provenance --access public --tag "$PREID" + npx npm@latest publish --provenance --access public --tag "$PREID" else - npm publish --provenance --access public + npx npm@latest publish --provenance --access public fi