Merge pull request #294 from guardian/jsh/trusted-publishing

Set up repo for NPM trusted publishing

Author: jonathonherbert

.github/workflows/release.yml

@@ -17,6 +17,8 @@ jobs:
     name: NPM Release
     needs: scala-maven-release
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-java@v4
@@ -25,13 +27,12 @@ jobs:
           java-version: 11
           cache: sbt
       - uses: sbt/setup-sbt@v1.1.0
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
           registry-url: https://registry.npmjs.org
       - name: Release Typescript to NPM
         run: |
           sbt "project typescript" "releaseNpm ${{ needs.scala-maven-release.outputs.RELEASE_VERSION }}"
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           RELEASE_TYPE: ${{ needs.scala-maven-release.outputs.RELEASE_TYPE }}

.nvmrc

@@ -1 +1 @@
-20.8.0
+24.13.0

build.sbt

@@ -33,6 +33,7 @@ lazy val artifactProductionSettings = Seq(
   crossScalaVersions := Seq("2.12.18", scalaVersion.value),
   organization := "com.gu",
   licenses := Seq("Apache v2" -> url("http://www.apache.org/licenses/LICENSE-2.0.html")),
+  scmInfo := Some(ScmInfo(url("https://github.com/guardian/content-api-models"), "scm:git@github.com:guardian/content-api-models.git")),
   resolvers ++= Resolver.sonatypeOssRepos("public"),
   Test / testOptions +=
     Tests.Argument(TestFrameworks.ScalaTest, "-u", s"test-results/scala-${scalaVersion.value}", "-o")