ci: run release + CLI publish jobs on ubuntu-latest

The Blacksmith runner migration (#1286) broke npm trusted publishing: Blacksmith runners mint OIDC tokens from a different issuer than GitHub Actions, so npm rejects the provenance publish with a 404. Move only the two publish jobs back to GitHub-hosted runners so the OIDC issuer matches the configured trusted publishers; the rest of the Blacksmith migration is unaffected.

Rhys Sullivan committed 4 months ago

Commit be1b5901 parent 14b79762 files · +2 −2Browse files

Showing the changes to .github (2 of 2 files). Show all

Unified · Split

2 files

.github/workflows/publish-executor-package.yml +1 −1
.github/workflows/release.yml +1 −1

.github/workflows/publish-executor-package.yml+1−1

@@ -21,7 +21,7 @@ concurrency: · 20 unmodified lines
21	21
22	22	jobs:
23	23	publish:
24		− runs-on: blacksmith-4vcpu-ubuntu-2404
	24	+ runs-on: ubuntu-latest
25	25	permissions:
26	26	actions: write
27	27	contents: write

.github/workflows/release.yml+1−1

@@ -15,7 +15,7 @@ concurrency: · 14 unmodified lines
15	15
16	16	jobs:
17	17	release:
18		− runs-on: blacksmith-4vcpu-ubuntu-2404
	18	+ runs-on: ubuntu-latest
19	19	permissions:
20	20	actions: write
21	21	contents: write