build: publish with OIDC connect

Author: hugo-vrijswijk

.github/setup/action.yml

@@ -21,6 +21,7 @@ runs:
       with:
         node-version: ${{ inputs.node-version }}
         cache: 'npm'
+        registry-url: 'https://registry.npmjs.org'
     - uses: actions/setup-java@v5
       if: ${{ inputs.setup-java == 'true' }}
       with:

.github/workflows/release.yml

@@ -19,7 +19,6 @@ jobs:
           setup-java: true
       - name: Set Release Env
         run: |
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
           echo ${{ secrets.PGP_SECRET }} | base64 --decode | gpg --batch --import
       - run: npx nx run-many --target=build
       - name: Release
@@ -28,4 +27,3 @@ jobs:
           PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
           SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
           SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
-          NPM_CONFIG_PROVENANCE: true

.gitignore

@@ -25,3 +25,5 @@ test-results/
 playwright-report/
 blob-report/
 playwright/.cache/
+.cursor/rules/nx-rules.mdc
+.github/instructions/nx.instructions.md

nx.json

@@ -2,7 +2,13 @@
   "$schema": "https://raw.githubusercontent.com/nrwl/nx/master/packages/nx/schemas/nx-schema.json",
   "extends": "nx/presets/npm.json",
   "namedInputs": {
-    "default": ["{projectRoot}/**/*", "{workspaceRoot}/package-lock.json", { "runtime": "node -v" }],
+    "default": [
+      "{projectRoot}/**/*",
+      "{workspaceRoot}/package-lock.json",
+      {
+        "runtime": "node -v"
+      }
+    ],
     "production": ["!{projectRoot}/test/**/*", "!{projectRoot}/eslint.config.js", "!{projectRoot}/stryker.conf.js"]
   },
   "targetDefaults": {
@@ -19,7 +25,13 @@
       "cache": true
     },
     "generate": {
-      "inputs": ["{projectRoot}/src/*.json", "{workspaceRoot}/tasks/schema2ts.mjs", { "externalDependencies": ["json-schema-to-typescript"] }],
+      "inputs": [
+        "{projectRoot}/src/*.json",
+        "{workspaceRoot}/tasks/schema2ts.mjs",
+        {
+          "externalDependencies": ["json-schema-to-typescript"]
+        }
+      ],
       "outputs": ["{projectRoot}/src-generated"],
       "cache": true
     },
@@ -29,7 +41,13 @@
       "cache": true
     },
     "stryker": {
-      "inputs": ["default", "^production", { "env": "GITHUB_REF" }],
+      "inputs": [
+        "default",
+        "^production",
+        {
+          "env": "GITHUB_REF"
+        }
+      ],
       "dependsOn": ["generate", "root:build:tsc", "^build"],
       "outputs": ["{projectRoot}/reports", "{projectRoot}/target/stryker4s-report-*/"],
       "cache": true