npm / npm/cli

Allow Trusted Publishers to run "npm dist-tag add"

Open
#8,547 23 comments 60 reactions 1 assignee View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
10.1k
Forks
4.7k
Avg merge
2d 2h
Merged PRs (30d)
19

Description

Currently the Trusted Publisher docs indicate that the only supported command is npm publish. For packages that maintain multiple release lines the release process in CI normally looks like:

  • npm publish --tag=20-x-y
  • If this is the latest release line
    • npm dist-tag add my-package@version latest

As an example you can check the dist tags of the electron package on npm. Without this ability we would be unable to switch to Trusted Publisher.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.