F5 Cloud Status MCP Server

name: Publish to npm with Trusted Publishing (OIDC) # This workflow uses npm Trusted Publishing with OIDC (Generally Available as of July 2025) # No npm tokens required! Configure at: https://www.npmjs.com/package/f5cloudstatus-mcp/access on: release: types: [created] permissions: contents: read id-token: write # Required for OIDC authentication with npm attestations: write # Required for provenance attestations jobs: publish: runs-on: ubuntu-latest environment: npm-production # Must match the environment configured in npm trusted publishers steps: - name: Checkout code uses: actions/checkout@v4 - name: Setup Node.js uses: actions/setup-node@v4 with: node-version: '22' registry-url: 'https://registry.npmjs.org' - name: Upgrade npm to v11 for Trusted Publishing run: npm install -g npm@latest - name: Verify npm version run: npm --version - name: Install dependencies run: npm ci - name: Run linter run: npm run lint || echo "Linter not configured, skipping" - name: Run tests run: npm test - name: Build package run: npm run build - name: Verify package contents run: npm pack --dry-run - name: Publish to npm with OIDC (Trusted Publishing) run: npm publish --access public # No NPM_TOKEN needed! Authentication happens via OIDC # Provenance is automatically included with trusted publishing