ci: migrate to NPM OIDC trusted publishing

.github/workflows/release-it.yml

@@ -12,42 +12,39 @@ on:
       - 'public/*'
   workflow_dispatch:
     inputs:
+      release_type:
+        description: 'Release type'
+        required: true
+        type: choice
+        options:
+          - release
+          - prerelease
+        default: release
       increment:
-        description: Override Default Version Increment
+        description: 'Override Default Version Increment (optional)'
         required: false
         default: ''
+      dist_tag:
+        description: 'Pre-release dist tag (only used for prerelease)'
+        required: false
+        default: 'alpha'
+
+permissions:
+  contents: write
+  id-token: write
 
 jobs:
   release:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
         with:
-          fetch-depth: 0 # Necessary to generate changelog from commit history
-      - uses: volta-cli/action@v4
+          fetch-depth: 0
 
-      - name: git config
-        run: |
-          git config user.name "${GITHUB_ACTOR}"
-          git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
-
-      - name: Get yarn cache directory path
-        id: yarn-cache-dir-path
-        run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
-      - uses: actions/cache@v4
+      - uses: nicksteffens/npm-oidc-release@v1
         with:
-          path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
-          key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-yarn-
-
-      - run: yarn install --immutable
-
-      - name: Configure NPM with auth token
-        run: npm config set //registry.npmjs.org/:_authToken $NPM_TOKEN
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-      - run: yarn release ${{ github.event.inputs.increment }}
+          release_type: ${{ inputs.release_type || 'release' }}
+          increment: ${{ inputs.increment }}
+          dist_tag: ${{ inputs.dist_tag }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.release-it.json

@@ -8,6 +8,9 @@
   "github": {
     "release": true
   },
+  "npm": {
+    "skipChecks": true
+  },
   "plugins": {
     "@release-it/conventional-changelog": {
       "infile": "CHANGELOG.md",

CHANGELOG.md

@@ -1,3 +1,11 @@
+## [2.3.2-oidc.3](https://github.com/movableink/fluid/compare/2.3.2-oidc.2...2.3.2-oidc.3) (2025-12-05)
+
+## [2.3.2-oidc.2](https://github.com/movableink/fluid/compare/2.3.2-oidc.1...2.3.2-oidc.2) (2025-12-05)
+
+## [2.3.2-oidc.1](https://github.com/movableink/fluid/compare/2.3.2-oidc.0...2.3.2-oidc.1) (2025-12-05)
+
+## [2.3.2-oidc.0](https://github.com/movableink/fluid/compare/2.3.1...2.3.2-oidc.0) (2025-12-05)
+
 ## [2.3.1](https://github.com/movableink/fluid/compare/2.3.0...2.3.1) (2025-11-06)
 
 ## [2.3.0](https://github.com/movableink/fluid/compare/2.2.0...2.3.0) (2025-11-06)

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@movable/fluid",
-  "version": "2.3.1",
+  "version": "2.3.2-oidc.3",
   "description": "Fluid is Movable Ink's design framework for its apps.",
   "homepage": "https://movableink.github.io/fluid/docs",
   "scripts": {