| 19:58 | <ljharb> | fwiw in the medium term humanless publishes won't be possible, so the biblio will need some kind of solution: https://github.blog/changelog/2026-07-08-npm-install-time-security-and-gat-bypass2fa-deprecation/ (OIDC will be the last way to do non-2FA publish, but non-staged OIDC will be killed as well eventually) we'll be able to stage things from CI but a human will still need to approve them |
| 20:14 | <bakkot> | where'd they say non-staged OIDC will be killed? |
| 20:16 | <bakkot> | I guess
is grammatically ambiguous; I read that as "to (trusted publishing) or (staged publishing with a human approval step)" rather than "to (trusted publishing or staged publishing) with a human approval step" |