Skip to content

ci: drop the unused expo setup, move to node 22 and publish with the built-in token - #33

Merged
petrkonecny2 merged 1 commit into
mainfrom
ci/node-22-and-built-in-token
Oct 10, 2026
Merged

petrkonecny2 merged 1 commit into
mainfrom
ci/node-22-and-built-in-token

Conversation

@petrkonecny2

@petrkonecny2 petrkonecny2 commented Oct 10, 2026 •

Copy link
Copy Markdown
Collaborator

Description

CI fails on every branch since the last green run in January, for two reasons that have nothing to do with the code.

PR checks die in setup. The shared setup action ran expo/expo-github-action with eas-version: latest on Node 20. latest is now eas-cli@24.12.1, whose @oclif/plugin-autocomplete@3.3.0 requires Node 22 or newer, so yarn add eas-cli aborts before lint, Prettier, TypeScript or Jest run.

  • Nothing in CI uses EAS or Expo, and the workflow never passed the EXPO_TOKEN input the action declared as required. The step and the input are gone.
  • CI moves to Node 22 in the setup action and the Test job. Node 20 has been end-of-life since April. Publish stays on Node 24, which trusted publishing needs.

Publish fails with 401 Bad credentials. npm already publishes through trusted publishing (#28), but auto shipit also needs a GitHub token for the release, tag and PR comments. It used the GH_TOKEN personal access token, which has expired.

  • It now uses the workflow's built-in GITHUB_TOKEN. The job already grants the permissions auto needs (contents, pull-requests and deployments).
  • The version-bump commit and tag are still pushed over the SSH_KEY deploy key from checkout, so that key must keep its push access to main.

After merging, the GH_TOKEN secret can be deleted.

Testing: this branch's own runs. The PR check should go green, and the push to this branch runs Publish, which publishes a canary through the new token, the same as every branch push today.

Related Tickets/Issues

Unblocks #32.

🤖 Generated with Claude Code

📦 Published PR as canary version: 0.1.14--canary.33.da32331.0

✨ Test out this PR locally via:

npm install @strv/react-native-hero-carousel@0.1.14--canary.33.da32331.0
# or 
yarn add @strv/react-native-hero-carousel@0.1.14--canary.33.da32331.0

…built-in token

The setup action installed eas-cli@latest, which now needs Node 22, so every PR check failed before running a single step. Nothing in CI uses EAS or Expo, so the step is gone, and CI runs on Node 22 since Node 20 is end-of-life.

auto shipit authenticated to GitHub with the GH_TOKEN personal access token, which has expired. npm already publishes through trusted publishing, and the workflow's own token has the permissions auto needs, so no stored token is left.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@petrkonecny2
petrkonecny2 merged commit f871366 into main Oct 10, 2026
3 checks passed

This branch was successfully deployed

1 active deployment
npm — da323315 Deployed Oct 10, 2026 by petrkonecny2 via Publish #49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant