Skip to content

Use trusted publishing to NPM and default GITHUB_TOKEN - #136

Merged
yasinkocak merged 10 commits into
mainfrom
trusted-publishing-github-token
Apr 3, 2026
Merged

yasinkocak merged 10 commits into
mainfrom
trusted-publishing-github-token

Conversation

@emielb

@emielb emielb commented Apr 2, 2026 •

Copy link
Copy Markdown
Contributor

Update several dependencies and use trusted publishing to NPM and the default GITHUB_TOKEN on GitHub, instead of personal access tokens for NPM and GitHub.

dependabot Bot and others added 4 commits February 28, 2026 00:22
Bumps [rollup](https://github.com/rollup/rollup) from 2.79.2 to 2.80.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/v2.80.0/CHANGELOG.md)
- [Commits](rollup/rollup@v2.79.2...v2.80.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 2.80.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.

Updates `minimatch` from 5.1.6 to 5.1.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v5.1.6...v5.1.9)

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v5.1.6...v5.1.9)

Updates `minimatch` from 10.0.1 to 10.2.4
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v5.1.6...v5.1.9)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 5.1.9
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 10.2.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@emielb
emielb marked this pull request as draft April 2, 2026 12:08
@emielb
emielb force-pushed the trusted-publishing-github-token branch from 4541cd4 to 6c7514e Compare April 3, 2026 08:21
@emielb
emielb force-pushed the trusted-publishing-github-token branch from 6c7514e to 5e64eb1 Compare April 3, 2026 08:27
@emielb
emielb marked this pull request as ready for review April 3, 2026 08:38
@emielb
emielb requested a review from yasinkocak as a code owner April 3, 2026 08:38
@yasinkocak
yasinkocak merged commit c583d50 into main Apr 3, 2026
4 checks passed
@yasinkocak
yasinkocak deleted the trusted-publishing-github-token branch April 3, 2026 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants