Sebastian "Sebbie" Silbermann 10725074a4 [ci] Use OIDC tokens to read private preview builds (#96919) ...

Replaces the shared, static `PREVIEW_BUILDS_READ_TOKEN` secret with OIDC
tokens for reading auth-protected preview builds from vercel-packages
(see https://github.com/vercel/vercel-packages/pull/96):

- CI jobs mint a GH oidc token for the
`https://vercel-packages.vercel.app` audience
- deploys have a `.npmrc` written that uses the Vercel OIDC token

Tarball polling now also fails fast on 401/403 (retrying can't change
the authorization outcome) and failure messages include response headers
so request IDs are available for debugging.



Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-08-12 18:21:05 +02:00

..

actions

…

comments

…

DISCUSSION_TEMPLATE

…

ISSUE_TEMPLATE

…

scripts

Add automated code review workflow (#96359)

2026-07-31 17:32:32 -04:00

workflows

[ci] Use OIDC tokens to read private preview builds (#96919)

2026-08-12 18:21:05 +02:00

AGENTS.md

…

CLAUDE.md

…

CODEOWNERS

…

next-stats-action.Dockerfile

…

package.json

…

pnpm-lock.yaml

…

pnpm-workspace.yaml

…

pull_request_template.md

…