Skip to content

Bump Node to 24 LTS so the release job's npm supports trusted publishing#170

Merged
RodrigoHamuy merged 4 commits into
mainfrom
trusted-publishing-oidc
Jul 18, 2026
Merged

Bump Node to 24 LTS so the release job's npm supports trusted publishing#170
RodrigoHamuy merged 4 commits into
mainfrom
trusted-publishing-oidc

Conversation

@RodrigoHamuy

@RodrigoHamuy RodrigoHamuy commented Jul 18, 2026

Copy link
Copy Markdown
Owner

The release job fails with EBADENGINE (failing run): the npm install -g npm@latest step now resolves to npm 12, which doesn't support the Node 22.17.1 pinned in .nvmrc.

Instead of juggling npm versions in CI, bump .nvmrc to Node 24.18.0 (latest LTS), which bundles npm ≥ 11.5.1 — new enough for trusted publishing — and drop the global npm upgrade step from the release workflow entirely.

🤖 Generated with Claude Code

RodrigoHamuy and others added 2 commits July 18, 2026 12:16
npm@latest is now npm 12, which requires Node >= 22.22.2 and fails
EBADENGINE on the Node 22.17.1 pinned in .nvmrc. npm 11 supports
trusted publishing (>= 11.5.1) and runs on Node ^20.17.0 || >=22.9.0.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@changeset-bot

changeset-bot Bot commented Jul 18, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: fe296a0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codesandbox-ci

codesandbox-ci Bot commented Jul 18, 2026

Copy link
Copy Markdown

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

Latest deployment of this branch, based on commit fe296a0:

Sandbox Source
example-mapbox Configuration
example-maplibre Configuration
stories Configuration

Node 24.18.0 bundles npm >= 11.5.1, which is all trusted publishing
needs, so drop the global npm upgrade step from the release workflow.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@RodrigoHamuy RodrigoHamuy changed the title Pin npm upgrade to v11 in release workflow Bump Node to 24 LTS so the release job's npm supports trusted publishing Jul 18, 2026
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@RodrigoHamuy
RodrigoHamuy merged commit 6e23328 into main Jul 18, 2026
3 checks passed
@RodrigoHamuy
RodrigoHamuy deleted the trusted-publishing-oidc branch July 18, 2026 11:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant