v13.1.0-alpha.13

13.1.0-alpha.13 (2025-10-15)

Bug Fixes

• trusted-publishing: properly await the check for trusted publishing context (23c8610), closes #958

v13.1.0-alpha.12

13.1.0-alpha.12 (2025-10-15)

Features

• trusted-publishing: log progression of token-exchange steps (a4a5add), closes #958

v13.1.0-alpha.11

13.1.0-alpha.11 (2025-10-15)

Bug Fixes

• verify-auth: stream output of the dry-run for custom registries (67ee603), closes #958

v13.1.0-alpha.10

13.1.0-alpha.10 (2025-10-15)

Features

• trusted-publishing: pass id-token as bearer header for gitlab pipelines (6d1c3cf), closes #958

v13.1.0-alpha.5

13.1.0-alpha.5 (2025-10-14)

Bug Fixes

• errors: resolve syntax problem (d825403)

v13.1.0-alpha.4

13.1.0-alpha.4 (2025-10-14)

Features

• trusted-publishing: verify auth, considering OIDC vs tokens from various registriess (e3319f1), closes #958

v13.1.0-alpha.3

13.1.0-alpha.3 (2025-10-14)

Bug Fixes

• errors: bring back the invalid token error (c9f0da5), closes #958

v13.1.0-alpha.2

13.1.0-alpha.2 (2025-10-14)

Features

• trusted-publishing: highlight in the error that a token is only required when not using OIDC (a2aa38f), closes #958

v13.1.0-alpha.1

13.1.0-alpha.1 (2025-10-13)

Bug Fixes

• auth: throw appropriate error when auth context fails to enable publishing (f5c8d85)
• auth: throw error if dry-run publish determines lack of auth (8f88e9d)
• deps: depend on the oidc branch for npm (733fe89)
• deps: depend on the released version of the cli branch now that the oidc features are merged (fc30c21)
• dry-run: look for the warning in stderr output rather than stdout (86f65a6)
• dry-run: stop searching for "warn" to avoid ANSI color complications (bee5db6)
• error: throw an aggregate error rather than a simple error (1967d72)
• stdout: fix the reference of stdout from execa (4ab3e74)
• token: temporarily disable configuring token into .npmrc (73185a3), closes #958
• whoami: temporarily disable verifying token validity (0fc050d), closes #958

Features

• auth-error: updated messaging for auth failure to be less token specific (e24967d)
• auth: attempt a dry-run publish to determine auth status (841dc67)
• verify-auth: configure npmrc details again (bd7acfb)

v13.0.0

13.0.0 (2025-10-13)

Features

• node-versions: drop support for node versions v20, v21, and v23
• node-versions: raise the minimum node version requirement for the v24 range (935439e)

Bug Fixes

• deps: update npm to v11 (debc7c5), closes #966 #966
• deps: update to the latest version of npm (1b25d6c)

BREAKING CHANGES

• node-versions: the minimum node version for the v24 range is now v24.10.0
• deps: a minimum of node v22.14 is now required