⚙️ (INFRAPRJ-6604): Push lib to jfrog

.changeset/config.json

@@ -10,7 +10,7 @@
   "fixed": [],
   "linked": [],
   "access": "public",
-  "baseBranch": "develop",
+  "baseBranch": "INFRAPRJ-6604",
   "updateInternalDependencies": "patch",
   "ignore": []
 }

.github/workflows/release.yml

@@ -1,16 +1,23 @@
 name: publish npm packages
+# on:
+#   push:
+#     branches:
+#       - main
+
 on:
-  push:
-    branches:
-      - main
+  pull_request:
 
 env:
   FORCE_COLOR: "1"
 
 jobs:
   publish:
-    environment: Production
-    runs-on: ubuntu-latest
+    # environment: Production
+    runs-on: ledgerhq-shared-medium
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
     steps:
       - uses: actions/checkout@v4
 
@@ -21,11 +28,26 @@ jobs:
 
       - name: build libraries
         run: pnpm build
+
+      - name: Login to JFrog Ledger
+        id: jfrog-login
+        uses: LedgerHQ/actions-security/actions/jfrog-login@actions/jfrog-login-1
+
+      - name: Setup npm config
+        env: 
+          # Change it to prod when test done
+          NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-sandbox-public
+        run: |
+          cat << EOF | tee .npmrc
+          # Setup JFrog registry
+          registry=https://${NPM_REGISTRY}
+          //${NPM_REGISTRY}/:_authToken=${{ steps.jfrog-login.outputs.oidc-token }}
+          EOF
 
-      - name: publish
+      - name: Publish to npm
         uses: changesets/action@v1
         with:
           publish: pnpm release
         env:
-          GITHUB_TOKEN: ${{ github.token }}
-          NPM_TOKEN: ${{ secrets.NPMJS_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.CI_BOT_TOKEN }}
+          NPM_TOKEN: ${{ steps.jfrog-login.outputs.oidc-token }}

package.json

@@ -1,7 +1,6 @@
 {
   "name": "@ledgerhq/device-sdk",
   "version": "1.0.0",
-  "private": true,
   "license": "MIT",
   "scripts": {
     "build": "turbo run build",