From 0091d90263840392ea3c6d433c73a7641f62686c Mon Sep 17 00:00:00 2001
From: Javier Cortejoso <javier.cortejoso@gmail.com>
Date: Wed, 11 Feb 2026 18:20:30 +0100
Subject: [PATCH] chore: update npm publish workflow to use npx for publishing

- Replaced `yarn npm publish` with `npx npm@latest publish` to ensure the latest npm CLI is used for package publishing.
- Removed unnecessary `yarn config set npmPublishAccess` commands to streamline the workflow.
- Maintained the existing dry run functionality for testing without actual publishing.
---
 .github/workflows/npm-publish.yml | 19 +++++++------------
 1 file changed, 7 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 2afe6a7c6..c471d1559 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -92,13 +92,13 @@ jobs:
         run: |
           yarn workspace @selfxyz/core build:deps
 
+      # OIDC trusted publishing requires the npm CLI (not yarn npm publish)
       - name: Publish to npm
         working-directory: sdk/core
         id: publish
         run: |
-          yarn config set npmPublishAccess public
           DRY_RUN="${{ github.event.inputs.dry_run == 'true' && '--dry-run' || '' }}"
-          yarn npm publish --access public $DRY_RUN
+          npx npm@latest publish --access public $DRY_RUN
 
       - name: Publish result
         if: always()
@@ -135,9 +135,8 @@ jobs:
         working-directory: sdk/qrcode
         id: publish
         run: |
-          yarn config set npmPublishAccess public
           DRY_RUN="${{ github.event.inputs.dry_run == 'true' && '--dry-run' || '' }}"
-          yarn npm publish --access public $DRY_RUN
+          npx npm@latest publish --access public $DRY_RUN
 
       - name: Publish result
         if: always()
@@ -172,9 +171,8 @@ jobs:
         working-directory: common
         id: publish
         run: |
-          yarn config set npmPublishAccess public
           DRY_RUN="${{ github.event.inputs.dry_run == 'true' && '--dry-run' || '' }}"
-          yarn npm publish --access public $DRY_RUN
+          npx npm@latest publish --access public $DRY_RUN
 
       - name: Publish result
         if: always()
@@ -206,9 +204,8 @@ jobs:
         working-directory: contracts
         id: publish
         run: |
-          yarn config set npmPublishAccess public
           DRY_RUN="${{ github.event.inputs.dry_run == 'true' && '--dry-run' || '' }}"
-          yarn npm publish --access public $DRY_RUN
+          npx npm@latest publish --access public $DRY_RUN
 
       - name: Publish result
         if: always()
@@ -243,9 +240,8 @@ jobs:
         working-directory: sdk/qrcode-angular
         id: publish
         run: |
-          yarn config set npmPublishAccess public
           DRY_RUN="${{ github.event.inputs.dry_run == 'true' && '--dry-run' || '' }}"
-          yarn npm publish --access public $DRY_RUN
+          npx npm@latest publish --access public $DRY_RUN
 
       - name: Publish result
         if: always()
@@ -282,9 +278,8 @@ jobs:
         working-directory: packages/mobile-sdk-alpha
         id: publish
         run: |
-          yarn config set npmPublishAccess restricted
           DRY_RUN="${{ github.event.inputs.dry_run == 'true' && '--dry-run' || '' }}"
-          yarn npm publish --access restricted --tag alpha $DRY_RUN
+          npx npm@latest publish --access restricted --tag alpha $DRY_RUN
 
       - name: Publish result
         if: always()