Skip to content

Conversation

@jonathannorris
Copy link
Member

Testing Angular SDK patch release after removing NPM_TOKEN from GitHub secrets to validate that OIDC authentication alone works for npm publishing.

Signed-off-by: Jonathan Norris <jonathan@taplytics.com>
@jonathannorris jonathannorris requested review from a team as code owners October 20, 2025 20:59
@jonathannorris jonathannorris changed the title Test OIDC NPM Publishing Without Token chore: Test OIDC NPM Publishing Without Token Oct 20, 2025
@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @jonathannorris, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request is a targeted test designed to verify the functionality of OIDC-based NPM publishing for the Angular SDK. The core objective is to confirm that packages can be successfully published without the explicit use of a stored NPM_TOKEN, thereby enhancing the security posture of the publishing process. The actual modification is a minor, non-functional change to a README.md file, which acts as a trigger for the associated CI/CD pipeline to execute the OIDC publishing flow.

Highlights

  • OIDC NPM Publishing Test: This pull request serves as a test to validate that OpenID Connect (OIDC) authentication alone is sufficient for publishing the Angular SDK to NPM, specifically after the removal of the NPM_TOKEN from GitHub secrets. The minimal code change is intended solely to trigger the publishing workflow.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a minor cosmetic change in packages/angular/projects/angular-sdk/README.md by removing a blank line. As the pull request description indicates, this change is intended to test the OIDC NPM publishing workflow. The change itself is innocuous and I see no issues with it.

Signed-off-by: Jonathan Norris <jonathan@taplytics.com>
@toddbaert toddbaert merged commit c800ff1 into main Oct 21, 2025
10 checks passed
@toddbaert toddbaert deleted the chore-angular-test-oidc-no-token branch October 21, 2025 13:03
toddbaert pushed a commit that referenced this pull request Oct 21, 2025
🤖 I have created a release *beep* *boop* --- ## [0.0.19](angular-sdk-v0.0.18...angular-sdk-v0.0.19) (2025-10-21) ### 🧹 Chore * Test OIDC NPM Publishing Without Token ([#1262](#1262)) ([c800ff1](c800ff1)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Signed-off-by: OpenFeature Bot <109696520+openfeaturebot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants