From 253cec2a4079625fb881dcb831ace374e7bde217 Mon Sep 17 00:00:00 2001 From: rgarcia <72655+rgarcia@users.noreply.github.com> Date: Fri, 12 Jun 2026 19:56:47 +0000 Subject: [PATCH] Add required --allow-publish flag to npm trust commands npm 11.17 requires an explicit permission flag on npm trust; the release workflows run a full npm publish, so --allow-publish is the right grant. --- docs/npm-releases.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/npm-releases.md b/docs/npm-releases.md index c4ae53a..9c3bedb 100644 --- a/docs/npm-releases.md +++ b/docs/npm-releases.md @@ -23,10 +23,10 @@ Configure each package on npm with a GitHub Actions trusted publisher: The same configuration can be created from the npm CLI: ```sh -npm install -g npm@^11.10.0 -npm trust github @onkernel/cua-ai --repo kernel/cua --file release-cua-ai.yml -npm trust github @onkernel/cua-agent --repo kernel/cua --file release-cua-agent.yml -npm trust github @onkernel/cua-cli --repo kernel/cua --file release-cua-cli.yml +npm install -g npm@^11.17.0 +npm trust github @onkernel/cua-ai --repo kernel/cua --file release-cua-ai.yml --allow-publish +npm trust github @onkernel/cua-agent --repo kernel/cua --file release-cua-agent.yml --allow-publish +npm trust github @onkernel/cua-cli --repo kernel/cua --file release-cua-cli.yml --allow-publish ``` npm requires packages to exist before a trusted publisher can be configured. If @@ -104,8 +104,8 @@ Publishing access → Add trusted publisher) using the row from the [trusted publishing setup](#trusted-publishing-setup) table, or from the CLI: ```sh -npm install -g npm@^11.10.0 -npm trust github @onkernel/cua-cli --repo kernel/cua --file release-cua-cli.yml +npm install -g npm@^11.17.0 +npm trust github @onkernel/cua-cli --repo kernel/cua --file release-cua-cli.yml --allow-publish ``` From `0.1.1` onward, bump `packages/cli/package.json` on `main`, then tag and