feat: Upgrade to node 24 and configure Trusted Publishing

.github/workflows/automate_dependabot_changeset.yml

@@ -36,7 +36,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 22
+          node-version: 24
           package-manager-cache: false
 
       - name: Fetch previous commit for check

.github/workflows/ci.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org/ # Needed for auth
           package-manager-cache: false
 
@@ -52,7 +52,7 @@ jobs:
     strategy:
       matrix:
         workspace: ${{ fromJSON(needs.find-changed-workspaces.outputs.workspaces) }}
-        node-version: [20, 22]
+        node-version: [22, 24]
       fail-fast: false
     defaults:
       run:
@@ -145,7 +145,7 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 22
+          node-version: 24
 
       - name: Install root dependencies
         run: yarn install --immutable

.github/workflows/release.yml

@@ -6,6 +6,9 @@ on:
       - main
   workflow_dispatch:
 
+permissions: 
+  id-token: write
+
 jobs:
   find-changed-workspaces:
     name: Detect workspace changes
@@ -24,7 +27,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org/ # Needed for auth
           package-manager-cache: false
 

.github/workflows/release_workspace.yml

@@ -22,6 +22,9 @@ on:
         required: true
         type: string
 
+permissions: 
+  id-token: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ inputs.workspace }}
 
@@ -58,7 +61,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org/ # Needed for auth
 
       - name: Get yarn cache directory path
@@ -124,7 +127,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org/ # Needed for auth
 
       - name: Get yarn cache directory path
@@ -150,7 +153,4 @@ jobs:
 
       - name: publish
         run: |
-          yarn config set -H 'npmAuthToken' "${{secrets.NPM_TOKEN}}"
           yarn workspaces foreach --all -v --no-private npm publish --access public --tolerate-republish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.yarnrc.yml

@@ -13,4 +13,4 @@ plugins:
     path: .yarn/plugins/@yarnpkg/plugin-backstage.cjs
     spec: "https://versions.backstage.io/v1/tags/main/yarn-plugin"
 
-yarnPath: .yarn/releases/yarn-4.5.1.cjs
+yarnPath: .yarn/releases/yarn-4.12.0.cjs

package.json

@@ -10,7 +10,7 @@
     "create-workspace": "community-cli workspace create"
   },
   "type": "module",
-  "packageManager": "yarn@4.5.1",
+  "packageManager": "yarn@4.12.0",
   "dependencies": {
     "@backstage-community/cli": "portal:./workspaces/repo-tools/packages/cli",
     "@backstage/cli-node": "backstage:^",

workspaces/confluence/.yarnrc.yml

@@ -13,4 +13,4 @@ plugins:
     path: .yarn/plugins/@yarnpkg/plugin-backstage.cjs
     spec: 'https://versions.backstage.io/v1/releases/1.37.0/yarn-plugin'
 
-yarnPath: .yarn/releases/yarn-4.7.0.cjs
+yarnPath: .yarn/releases/yarn-4.12.0.cjs

workspaces/confluence/package.json

@@ -57,5 +57,5 @@
       "prettier --write"
     ]
   },
-  "packageManager": "yarn@4.7.0"
+  "packageManager": "yarn@4.12.0"
 }

workspaces/github-marketplace/.yarnrc.yml

@@ -13,4 +13,4 @@ plugins:
     path: .yarn/plugins/@yarnpkg/plugin-backstage.cjs
     spec: 'https://versions.backstage.io/v1/releases/1.37.0/yarn-plugin'
 
-yarnPath: .yarn/releases/yarn-4.7.0.cjs
+yarnPath: .yarn/releases/yarn-4.12.0.cjs

workspaces/github-marketplace/package.json

@@ -58,5 +58,5 @@
       "prettier --write"
     ]
   },
-  "packageManager": "yarn@4.7.0"
+  "packageManager": "yarn@4.12.0"
 }

workspaces/upptime/.yarnrc.yml

@@ -13,4 +13,4 @@ plugins:
     path: .yarn/plugins/@yarnpkg/plugin-backstage.cjs
     spec: 'https://versions.backstage.io/v1/releases/1.37.0/yarn-plugin'
 
-yarnPath: .yarn/releases/yarn-4.7.0.cjs
+yarnPath: .yarn/releases/yarn-4.12.0.cjs

workspaces/upptime/package.json

@@ -56,5 +56,5 @@
       "prettier --write"
     ]
   },
-  "packageManager": "yarn@4.7.0"
+  "packageManager": "yarn@4.12.0"
 }