Skip to content

Migrate library publishing to GitHub Packages [WPB-26998]#21813

Closed
screendriver wants to merge 1 commit into
mainfrom
github-packages
Closed

Migrate library publishing to GitHub Packages [WPB-26998]#21813
screendriver wants to merge 1 commit into
mainfrom
github-packages

Conversation

@screendriver

@screendriver screendriver commented Jul 13, 2026

Copy link
Copy Markdown
Member
EpicWPB-26998 Standardize npm package publishing on GitHub Packages

This pull request moves the web-app library publishing process from npmjs.com to the GitHub Packages npm registry.

The existing Nx Release flow remains unchanged: the first workflow creates a versioning pull request, and the second workflow publishes the packages after that pull request is merged.

Publishing now uses the repository’s GITHUB_TOKEN through NODE_AUTH_TOKEN and requires packages: write. The npmjs.com trusted publishing and provenance configuration are no longer needed.

Package publishing is configured explicitly through each publishable package’s publishConfig. The root registry configuration remains pointed at npmjs.com so that regular dependencies continue to install normally. GitHub Packages is configured only for the publishing step to avoid redirecting all @wireapp/* dependencies during installation.

The runtime dependency graph of @wireapp/api-client was also reviewed. Repository-local packages that are required by consumers are included in the release setup where necessary.

@wireapp/protocol-messaging is maintained in a separate repository. It must also be available through GitHub Packages before consumers can install @wireapp/api-client exclusively from the GitHub registry.

The publishing documentation now covers the GitHub Packages workflow, authentication for local development and GitHub Actions, package access configuration, manual publishing, and the existing squash-merge tag-retargeting behaviour.

Follow-up

The @wireapp/protocol-messaging package must be migrated in the wireapp/generic-message-proto repository before the complete @wireapp dependency chain can be consumed through GitHub Packages.

Publish the repository libraries through the GitHub Packages npm registry instead of npmjs.com.

Use the repository GITHUB_TOKEN for authentication, keep dependency installation on npmjs.com, and configure the registry explicitly for each published package.

Update the release workflow and publishing documentation to reflect the new registry, permissions, authentication, and consumer setup.

Document the remaining cross-repository dependency on @wireapp/protocol-messaging.
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant