Opt-in dist-tag permissions for npm trusted publishing

Trusted publishing configurations for npm can now be granted permission to manage dist-tags (e.g., promoting a version to latest, updating next and beta pointers) using short-lived OIDC credentials instead of a long-lived access token. Previously, trusted publishing covered publishing and staging, but not dist-tag operations. That meant... Weiterlesen: Opt-in dist-tag permissions for npm trusted publishing