Skip to content

ci: use npm stage publish for 2FA - #221

Merged
riderx merged 4 commits into
mainfrom
ci/npm-stage-publish
Aug 20, 2026
Merged

ci: use npm stage publish for 2FA#221
riderx merged 4 commits into
mainfrom
ci/npm-stage-publish

Conversation

@riderx

@riderx riderx commented Aug 20, 2026

Copy link
Copy Markdown
Member

What

  • Switch production and PR beta publishes from npm publish to npm stage publish.

Why

  • npm no longer allows long-lived unattended publish tokens.

How

  • Plugin CI stages the package with the org NPM_TOKEN.

Testing

  • Same change already shipped on @capgo/capacitor-wifi.

Not Tested

  • This repo's next GitHub release / /publish-beta on a live PR.

npm no longer allows long-lived bypass_2fa tokens. Stage the package in plugin CI, then let Cap-go/automations approve it.
@coderabbitai

coderabbitai Bot commented Aug 20, 2026

Copy link
Copy Markdown

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 051322e1-97e1-41b9-803d-9df8910c7565

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

Beta npm build

Maintainers can publish this PR to npm for fast testing.

Comment /publish-beta after the PR checks are green.

The workflow will:

  • publish a prerelease package on the beta tag
  • add a pinned pr-221 dist-tag for this exact PR build
  • update this comment with the install command

Security note: beta publish is only enabled for branches inside this repository.

riderx added 3 commits August 20, 2026 04:03
Stage publish cannot set pr-N tags without 2FA. Point testers at @beta/@Version after automations approves.
Stage publish cannot refresh dist-tags without 2FA. The in-progress comment must match that.
Plugin repos should not describe the internal approver.
@riderx
riderx marked this pull request as ready for review August 20, 2026 09:27
@riderx
riderx merged commit 5e3075e into main Aug 20, 2026
9 checks passed
@riderx
riderx deleted the ci/npm-stage-publish branch August 20, 2026 09:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant