ci: use-trusted-publishers

Author: ryanbas21

.github/workflows/publish.yml

@@ -8,7 +8,6 @@ env:
   NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
   NX_CLOUD_DISTRIBUTED_EXECUTION: true
   PNPM_CACHE_FOLDER: .pnpm-store
-  NPM_ACCESS_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
   CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   CI: true
 
@@ -80,8 +79,6 @@ jobs:
           # See https://github.com/changesets/action/issues/147
           HOME: ${{ github.workspace }}
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
-          NPM_CONFIG_PROVENANCE: 'true'
-          NPM_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
 
       - name: Send GitHub Action data to a Slack workflow
         if: steps.changesets.outputs.published == 'true'

.github/workflows/snapshot.yml

@@ -2,14 +2,6 @@ name: Snapshots
 on:
   workflow_dispatch:
     inputs:
-      registry:
-        description: 'Npm Registry or Private Registry'
-        required: false
-        default: 'https://registry.npmjs.org/'
-        type: choice
-        options:
-          - https://registry.npmjs.org/
-          - https://npm.petrov.ca
       branch:
         description: 'Branch to publish from'
         required: false
@@ -21,7 +13,6 @@ env:
   NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
   NX_CLOUD_DISTRIBUTED_EXECUTION: true
   PNPM_CACHE_FOLDER: .pnpm-store
-  NPM_ACCESS_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
   CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   HUSKY: 0
 
@@ -80,29 +71,10 @@ jobs:
             ./**/.playwright/**
           retention-days: 30
 
-      - name: Update npmrc
-        run: |
-          cat << EOF > ".npmrc"
-            //registry.npmjs.org/:_authToken=$NPM_TOKEN
-            //npm.petrov.ca/:_authToken=$NPM_TOKEN
-          EOF
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
       - name: Version Packages as Beta
         run: pnpm changeset version --snapshot beta
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
 
       - name: Publish packages as beta
-        if: ${{ inputs.registry == 'https://registry.npmjs.org/' }}
-        run: pnpm publish -r --tag beta --no-git-checks --registry ${{ inputs.registry }}
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
-          NPM_CONFIG_PROVENANCE: 'true' # make sure provenance is working on beta releases to npm
-
-      - name: Publish packages as beta
-        if: ${{ inputs.registry != 'https://registry.npmjs.org/' }}
-        run: pnpm publish -r --tag beta --no-git-checks --registry ${{ inputs.registry }}
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
-          NPM_CONFIG_PROVENANCE: false # verdaccio doesn't support provenance
+        run: pnpm publish -r --tag beta --no-git-checks