npm trusted publishing now supports CircleCI as an OIDC provider, joining GitHub Actions and GitLab CI/CD. This allows maintainers publishing packages from CircleCI workflows to eliminate stored credentials and authenticate directly through their pipeline. Configuration is available via the npm website and the `npm trust` CLI command. Additionally, npmjs.com is shipping dark mode, built using GitHub Copilot agent mode with minimal engineering effort.

1m read timeFrom github.blog
Post cover image

Sort: