publish-package-cicd

Automate npm package publishing for monorepos with Changesets and OIDC.

729|67|Updated Dec 8, 2025
One-click install
npx skills add https://github.com/joelhooks/swarm-tools --skill publish-package-cicd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: publish-package-cicd
Source: https://github.com/joelhooks/swarm-tools/tree/main/.opencode/skill/publish-package-cicd
Command: npx skills add https://github.com/joelhooks/swarm-tools --skill publish-package-cicd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill simplifies automated npm publishing for monorepos by combining Changesets with npm Trusted Publishers (OIDC), removing manual token handling and streamlining release workflows.

Core Features & Use Cases

  • Automated release workflow: creates release PRs via Changesets and CI.
  • OIDC-based trusted publishing: publishes npm packages without needing NPM_TOKEN.
  • Workspace:* resolution handling: supports resolution issues and troubleshooting for publish.

Quick Start

Create a manual changeset file under .changeset/, commit and push to main to trigger the release workflow, and verify the PR and CI publishing steps.

Frequently Asked Questions about publish-package-cicd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I publish npm packages from a monorepo using OIDC instead of an NPM_TOKEN?

You can publish npm packages without an NPM_TOKEN by using npm Trusted Publishers (OIDC) integrated into your GitHub Actions CI/CD workflow, utilizing bun pm pack followed by npm publish for secure, automated releases.

Why does my npm publish fail with module-not-found errors in a Bun monorepo?

Module-not-found errors during npm publish in a Bun monorepo usually stem from unresolved workspace:* protocol references. You must resolve workspace:* protocol dependencies before packing and publishing your packages.

How do I automate npm publishing with Changesets in a CI pipeline?

Automate npm publishing by creating manual changeset files under .changeset/, committing them to trigger a release workflow that generates a release PR, and letting CI execute the custom publish script using OIDC authentication.

Do I need an NPM_TOKEN to publish packages automatically with GitHub Actions?

No, you do not need an NPM_TOKEN to publish packages automatically with GitHub Actions. By configuring npm Trusted Publishers with OIDC, you can securely publish packages without manual token handling.

Can I use Changesets for versioning and publishing a Bun monorepo?

Yes, you can use Changesets for versioning a Bun monorepo. This setup integrates Changesets versioning with a custom publish script that uses bun pm pack and npm publish with OIDC to handle workspace:* resolution.

What is the best way to handle workspace:* protocol resolution before npm publish?

The best way to handle workspace:* protocol resolution before npm publish is to integrate a custom publish script within your CI workflow that properly resolves these workspace dependencies during the bun pm pack phase.