Skip to content

ci: publish npm package with provenance - #3

Merged
BiancaBianchiSC merged 1 commit into
mainfrom
fix/npm-provenance-publish
Jun 26, 2026
Merged

ci: publish npm package with provenance#3
BiancaBianchiSC merged 1 commit into
mainfrom
fix/npm-provenance-publish

Conversation

@ConnectFontes

Copy link
Copy Markdown
Collaborator

Summary

Updates the npm publish workflow to publish the package with provenance, as required by the n8n Creator Portal.

Changes

  • Configures actions/setup-node with the npm registry URL.
  • Passes NODE_AUTH_TOKEN from the NPM_TOKEN GitHub Actions secret.
  • Forces npm provenance with NPM_CONFIG_PROVENANCE=true.

Context

The package n8n-nodes-rdsc@0.0.1 was published successfully, but the n8n Creator Portal blocked the submission because that version was not published with provenance.

After this workflow change is merged, we need to publish a new version, e.g. 0.0.2, because npm versions are immutable and 0.0.1 cannot be republished.

Validation

  • Existing package metadata was checked locally.
  • npm pack --dry-run --json succeeds.
  • The previous GitHub Actions run passed lint, build, and package generation; the remaining issue is the provenance requirement for npm publish.

@ConnectFontes
ConnectFontes requested a review from a team as a code owner June 26, 2026 19:15
@BiancaBianchiSC
BiancaBianchiSC merged commit 6f91e2d into main Jun 26, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants