ci: run release + CLI publish jobs on ubuntu-latest

The Blacksmith runner migration (#1286) broke npm trusted publishing: Blacksmith runners mint OIDC tokens from a different issuer than GitHub Actions, so npm rejects the provenance publish with a 404. Move only the two publish jobs back to GitHub-hosted runners so the OIDC issuer matches the configured trusted publishers; the rest of the Blacksmith migration is unaffected.

Rhys Sullivan committed 4 months ago

Commit be1b5901 parent 14b79762 files · +2 −2Browse files

Showing the changes to .github (2 of 2 files). Show all

Unified · Split

2 files

.github/workflows/publish-executor-package.yml +1 −1
.github/workflows/release.yml +1 −1

.github/workflows/publish-executor-package.yml+1−1

@@ -21,7 +21,7 @@ concurrency: · 20 unmodified lines
21		21
22	jobs:	22	jobs:
23	publish:	23	publish:
24	runs-on: blacksmith-4vcpu-ubuntu-2404	24	runs-on: ubuntu-latest
25	permissions:	25	permissions:
26	actions: write	26	actions: write
27	contents: write	27	contents: write

.github/workflows/release.yml+1−1

@@ -15,7 +15,7 @@ concurrency: · 14 unmodified lines
15		15
16	jobs:	16	jobs:
17	release:	17	release:
18	runs-on: blacksmith-4vcpu-ubuntu-2404	18	runs-on: ubuntu-latest
19	permissions:	19	permissions:
20	actions: write	20	actions: write
21	contents: write	21	contents: write