ci: enable oidc publish

Author: ocavue

.github/actions/setup/action.yml

@@ -5,15 +5,13 @@ inputs:
   node-version:
     description: The version of node.js
     required: false
-    default: '20'
+    default: '24'
 
 runs:
   using: composite
   steps:
     - name: Install pnpm
-      uses: pnpm/action-setup@v2
-      with:
-        run_install: false
+      uses: pnpm/action-setup@v4
 
     - name: Setup node
       uses: actions/setup-node@v4
@@ -22,10 +20,20 @@ runs:
         cache: pnpm
         registry-url: 'https://registry.npmjs.org'
 
-    - name: Setup ni
-      run: npm i -g @antfu/ni
+    - name: Check npm version
+      shell: bash
+      run: npm --version
+
+    - name: Update npm
+      shell: bash
+      run: npm install -g npm@latest
+
+    # NPM v11.5.0 added support for OIDC publish
+    # https://docs.npmjs.com/cli/v11/using-npm/changelog#1150-2025-07-24
+    - name: Check npm version
       shell: bash
+      run: npm --version
 
     - name: Install
-      run: ni
+      run: pnpm install
       shell: bash

.github/workflows/release.yml

@@ -20,6 +20,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: [version]
     if: ${{ needs.version.outputs.release_created }}
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -30,5 +32,3 @@ jobs:
 
       - name: Publish to NPM
         run: pnpm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

README.md

@@ -1,5 +1,7 @@
 # @ocavue/eslint-config
 
+[![npm](https://img.shields.io/npm/v/@ocavue/eslint-config)](https://www.npmjs.com/package/@ocavue/eslint-config)
+
 A set of ESLint shareable configs for TypeScript projects.
 
 - Out of the box support for TypeScript, React, and Markdown

src/react.ts

@@ -1,6 +1,6 @@
 import type { Linter } from 'eslint'
 import reactPlugin from 'eslint-plugin-react'
-import reactCompiler from "eslint-plugin-react-compiler"
+import reactCompiler from 'eslint-plugin-react-compiler'
 import reactHooksPlugin from 'eslint-plugin-react-hooks'
 
 import { resolveReactOptions, type ReactOptions } from './options.js'