SPAR-444: publish @nulogy/tokens to GitHub Packages - #81
Merged
Conversation
Point publishing at GitHub Packages (npm.pkg.github.com) so this package lives under the @nulogy scope alongside the private @nulogy/spark-ui. Yarn allows only one registry per scope, so consolidating NDS onto GitHub Packages lets spark-ui stay private without a scope conflict in PackManager. - publishConfig.registry -> GitHub Packages; access restricted - release workflow: add packages:write; drop the npmjs-only OIDC id-token; authenticate @semantic-release/npm with NPM_TOKEN = GITHUB_TOKEN - README: install from the @nulogy GitHub Packages registry SPAR-444 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
sskirby
marked this pull request as ready for review
July 22, 2026 21:24
semantic-release only publishes new versions forward, so the older versions current consumers pin (e.g. components 19.1.3 and 15.1.4) won't exist on GitHub Packages. This workflow_dispatch job republishes given npmjs versions to GitHub Packages using the built-in GITHUB_TOKEN, so consumers can switch registries without changing their pinned versions. SPAR-444 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
sskirby
force-pushed
the
SPAR-444-publish-to-github-packages
branch
from
July 23, 2026 14:32
f814cd1 to
88085d7
Compare
ashik-v
approved these changes
Jul 23, 2026
Match the decided auth approach: reference ${GITHUB_NPM_AUTH_TOKEN} (not the
generic NODE_AUTH_TOKEN) and show the PAT-free GitHub CLI setup for local reads.
SPAR-444
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Switch
@nulogy/tokenspublishing from public npmjs to GitHub Packages (npm.pkg.github.com), keeping the@nulogyscope.Part of SPAR-444. Yarn allows only one registry per package scope, so
@nulogy/*on npmjs and the private@nulogy/spark-uion GitHub Packages cannot both install in PackManager. Consolidating the NDS family (@nulogy/components,@nulogy/icons,@nulogy/tokens) onto GitHub Packages resolves the conflict without exposing spark-ui publicly.Changes
package.json→publishConfig.registry = https://npm.pkg.github.com,access: restricted.github/workflows/release.yml: addpackages: write; removeid-token: write(npm OIDC trusted publishing is npmjs-only, inert for GitHub Packages); authenticate@semantic-release/npmviaNPM_TOKEN: ${{ secrets.GITHUB_TOKEN }}(the plugin readsNPM_TOKEN, notNODE_AUTH_TOKEN)@nulogyGitHub Packages registryPublishing sequencing
ci:-typed, so semantic-release cuts no release on merge. The first GitHub Packages release happens on the next releasable (feat:/fix:) commit tomain; the version continues from existing git tags (stays on the current major), satisfying PackManager's current range.npm whoamiis skipped for non-default registries, so verify needs onlyNPM_TOKENpresent (@semantic-release/npmverify-auth.js).Related
nulogy/design-system,nulogy/nds-icons,nulogy/nds-tokens@nulogyscope at GitHub Packages and drop thefile:spark-ui dependency.