Compare commits

...

2 Commits

Author SHA1 Message Date
Romuald Członkowski
6e85c68d62 chore: bump version to 2.29.3 to trigger OIDC publish
The previous workflow re-run used cached old workflow code with
NPM_TOKEN. This version bump triggers a fresh workflow run with
the new OIDC Trusted Publishing configuration.

Conceived by Romuald Członkowski - www.aiadvisors.pl/en

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-12 13:48:11 +01:00
Romuald Członkowski
fa7d0b420e ci: switch NPM publishing to Trusted Publishing (OIDC)
Replace static NPM_TOKEN with OIDC-based authentication for improved
security. This uses NPM's Trusted Publishing feature which:
- Eliminates need for long-lived tokens
- Provides provenance attestation
- Is the recommended approach by npm

Requires configuring Trusted Publishing in npm package settings:
- Repository owner: czlonkowski
- Repository name: n8n-mcp
- Workflow filename: release.yml

Conceived by Romuald Członkowski - www.aiadvisors.pl/en

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-12 13:24:25 +01:00
3 changed files with 6 additions and 5 deletions

View File

@@ -308,6 +308,9 @@ jobs:
runs-on: ubuntu-latest
needs: [detect-version-change, build-and-verify, create-release]
if: needs.detect-version-change.outputs.version-changed == 'true'
permissions:
contents: read
id-token: write # Required for NPM Trusted Publishing (OIDC)
steps:
- name: Checkout repository
uses: actions/checkout@v4
@@ -393,9 +396,7 @@ jobs:
max_attempts: 3
command: |
cd npm-publish-temp
npm publish --access public
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
npm publish --access public --provenance
- name: Clean up
if: always()

View File

@@ -1,6 +1,6 @@
{
"name": "n8n-mcp",
"version": "2.29.2",
"version": "2.29.3",
"description": "Integration between n8n workflow automation and Model Context Protocol (MCP)",
"main": "dist/index.js",
"types": "dist/index.d.ts",

View File

@@ -1,6 +1,6 @@
{
"name": "n8n-mcp-runtime",
"version": "2.28.7",
"version": "2.29.3",
"description": "n8n MCP Server Runtime Dependencies Only",
"private": true,
"dependencies": {