Merge pull request #653 from stenciljs/gm/review-publish-npm-ga

chore(npm): Update release npm action to stop using tokens

Author: gnbm

.github/workflows/build.yml

@@ -10,24 +10,24 @@ jobs:
     name: Build Stencil Sass
     runs-on: 'ubuntu-latest'
     steps:
-      - name: Checkout Code
+      - name: 📥 Checkout Code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           # the pull_request_target event will consider the HEAD of `main` to be the SHA to use.
           # attempt to use the SHA associated with a pull request and fallback to HEAD of `main`
           ref: ${{ github.event_name == 'pull_request_target' && format('refs/pull/{0}/merge', github.event.number) || '' }}
           persist-credentials: false
 
-      - name: Get Core Dependencies
+      - name: 🕸️ Get Core Dependencies
         uses: stenciljs/.github/actions/get-core-dependencies@main
 
-      - name: Stencil Sass Build
+      - name: 🏗️ Stencil Sass Build
         run: npm run build
         shell: bash
 
-      - name: Unit Tests
+      - name: 🧪 Unit Tests
         run: npm test
         shell: bash
 
-      - name: Upload Build Artifacts
+      - name: 📤 Upload Build Artifacts
         uses: stenciljs/.github/actions/upload-archive@main

.github/workflows/main.yml

@@ -27,31 +27,31 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - name: Checkout Code
+    - name: 📥 Checkout Code
       uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with:
         persist-credentials: false
 
-    - name: Get Core Dependencies
+    - name: 🕸️ Get Core Dependencies
       uses: stenciljs/.github/actions/get-core-dependencies@main
 
-    - name: Prettier Check
+    - name: 📝 Prettier Check
       run: npm run prettier.dry-run
       shell: bash
 
-    - name: Install Stencil ${{matrix.stencil_version}}
+    - name: 📦 Install Stencil ${{matrix.stencil_version}}
       run: npm install --save-dev @stencil/core@${{matrix.stencil_version}}
       shell: bash
       if: ${{ matrix.stencil_version != 'DEFAULT' }}
 
-    - name: Report Stencil Version
+    - name: 📊 Report Stencil Version
       run: npm ls @stencil/core
       shell: bash
 
-    - name: Build
+    - name: 🏗️ Build
       run: npm run build -- --ci
       shell: bash
 
-    - name: Test
+    - name: 🧪 Test
       run: npm run test.ci
       shell: bash

.github/workflows/release.yml

@@ -23,20 +23,20 @@ on:
 
 jobs:
   build_stencil_sass:
-    name: Build
+    name: 🏗️ Build Stencil Sass
     uses: ./.github/workflows/build.yml
 
   get_dev_version:
     if: inputs.devRelease == 'yes'
-    name: Get Dev Build Version
+    name: 🔍 Get Dev Build Version
     runs-on: ubuntu-latest
     outputs:
       dev-version: ${{ steps.generate-dev-version.outputs.DEV_VERSION }}
     steps:
-      - name: Checkout Code
+      - name: 📥 Checkout Code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
-      - name: Generate Dev Version
+      - name: ⚙️ Generate Dev Version
         id: generate-dev-version
         run: |
           PKG_JSON_VERSION=$(cat package.json | jq -r '.version')
@@ -55,34 +55,32 @@ jobs:
 
   release_sass_stencil:
     if: inputs.devRelease == 'yes'
-    name: Publish Dev Build
+    name: 📦 Publish Dev Build
     needs: [build_stencil_sass, get_dev_version]
     runs-on: ubuntu-latest
     permissions:
       id-token: write
     steps:
-      - name: Checkout Code
+      - name: 📥 Checkout Code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - uses: stenciljs/.github/actions/publish-npm@main
+      - uses: stenciljs/.github/actions/publish-npm@e9945bdf51e97eee158513427ecf7be3d3a80443 # temp fix for trusted publishers
         with:
           tag: dev
           version: ${{ needs.get_dev_version.outputs.dev-version }}
-          token: ${{ secrets.NPM_PAT_STENCIL_BOT }}
 
   release_create_stencil_cli:
     if: inputs.devRelease == 'no'
-    name: Publish Stencil Store
+    name: 📦 Publish Stencil Store
     needs: [build_stencil_sass]
     runs-on: ubuntu-latest
     permissions:
       contents: write
       id-token: write
     steps:
-      - name: Checkout Code
+      - name: 📥 Checkout Code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - uses: stenciljs/.github/actions/publish-npm@main
+      - uses: stenciljs/.github/actions/publish-npm@e9945bdf51e97eee158513427ecf7be3d3a80443 # temp fix for trusted publishers
         with:
           tag: latest
           version: ${{ inputs.releaseType }}
-          token: ${{ secrets.NPM_PAT_STENCIL_BOT }}
-          github-token: ${{ secrets.GH_ADMIN_PAT }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}

package-lock.json

@@ -15,7 +15,7 @@
   "scripts": {
     "prebuild": "rimraf ./dist",
     "prettier": "npm run prettier.base -- --write",
-    "prettier.base": "prettier --cache 'src/**/*.ts'",
+    "prettier.base": "prettier --cache \"src/**/*.ts\"",
     "prettier.dry-run": "npm run prettier.base -- --list-different",
     "build": "npm run prebuild && npm run rollup",
     "watch": "npm run rollup -- --watch",
@@ -27,26 +27,26 @@
     "test.watch": "jest --watch"
   },
   "dependencies": {
-    "sass-embedded": "^1.89.2"
+    "sass-embedded": "^1.93.2"
   },
   "peerDependencies": {
     "@stencil/core": ">=2.0.0 || >=3.0.0-beta.0 || >= 4.0.0-beta.0 || >= 4.0.0"
   },
   "devDependencies": {
     "@ionic/prettier-config": "^4.0.0",
-    "@rollup/plugin-node-resolve": "^16.0.1",
-    "@rollup/plugin-typescript": "^12.1.3",
-    "@stencil/core": "^4.35.1",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@rollup/plugin-typescript": "^12.3.0",
+    "@stencil/core": "^4.38.2",
     "@types/jest": "^30.0.0",
-    "@types/node": "^22.13.8",
-    "jest": "^30.0.2",
+    "@types/node": "^24.9.2",
+    "jest": "^30.2.0",
     "np": "^10.2.0",
-    "prettier": "^3.6.0",
+    "prettier": "^3.6.2",
     "rimraf": "^6.0.1",
-    "rollup": "^4.44.0",
-    "terser": "^5.43.1",
-    "ts-jest": "^29.4.0",
-    "typescript": "~5.9.2"
+    "rollup": "^4.52.5",
+    "terser": "^5.44.0",
+    "ts-jest": "^29.4.5",
+    "typescript": "~5.9.3"
   },
   "repository": {
     "type": "git",