npm trusted publishing finally covers dist-tags, if you ask nicely

Picture the npm maintainer who did the hard work: moved publishing to OIDC, deleted the automation token from the password manager, celebrated with coffee. Then shipped a patch and had to run npm dist-tag add from a laptop because the shiny new trusted publishing flow could push versions but not point latest at them. Awkward. That gap closed this... Weiterlesen: npm trusted publishing finally covers dist-tags, if you ask nicely