fix: NPM token env var#162
Merged
Merged
Conversation
Contributor
|
Given that we've already setup Trusted Publisher, dont think we will need this any more, plus the token is no longer the recommended way |
Contributor
|
did a light patch to cleanup the setting |
fred-venus
approved these changes
Feb 25, 2026
GitGuru7
pushed a commit
that referenced
this pull request
Apr 10, 2026
## 2.14.0 (2026-04-10) * fix [VRR-17] [VRR-18] Missing Redundancy Check ([f4d3fcb](f4d3fcb)) * Merge branch 'acm-risk-steward' into feat/vpd-29-risk-steward-v2 ([bb363a6](bb363a6)) * Merge branch 'acm-risk-steward' of github.com:VenusProtocol/governance-contracts into acm-risk-stewa ([d3933dd](d3933dd)) * Merge branch 'develop' into acm-risk-steward ([2a74d81](2a74d81)) * Merge branch 'develop' into acm-risk-steward ([cabfdbb](cabfdbb)) * Merge branch 'develop' into acm-risk-steward ([81fe87e](81fe87e)) * Merge branch 'develop' into acm-risk-steward ([642da42](642da42)) * Merge pull request #115 from VenusProtocol/acm-risk-steward ([184ca48](184ca48)), closes [#115](#115) * Merge pull request #155 from VenusProtocol/chore/permissions ([b497cde](b497cde)), closes [#155](#155) * Merge pull request #157 from VenusProtocol/release/back.20250929 ([83cba7b](83cba7b)), closes [#157](#157) * Merge pull request #158 from VenusProtocol/fix/contract-verification ([b54bd1a](b54bd1a)), closes [#158](#158) * Merge pull request #159 from VenusProtocol/chore/slim-package ([c684ed0](c684ed0)), closes [#159](#159) * Merge pull request #160 from VenusProtocol/docs/sync-the-permissions ([ff01c99](ff01c99)), closes [#160](#160) * Merge pull request #161 from VenusProtocol/chore/slim-package ([516cd7d](516cd7d)), closes [#161](#161) * Merge pull request #162 from VenusProtocol/fix/slim-package ([4d93d6f](4d93d6f)), closes [#162](#162) * Merge pull request #163 from VenusProtocol/feat/vpd-29-risk-steward-v2 ([157f54f](157f54f)), closes [#163](#163) * Merge pull request #164 from VenusProtocol/fix/vpd-29-hashdit-audit ([b5fade5](b5fade5)), closes [#164](#164) * Merge pull request #165 from VenusProtocol/fix/vpd-29-quantstamp-audit ([4a3c0b0](4a3c0b0)), closes [#165](#165) * Merge pull request #166 from VenusProtocol/fix/vpd-29-certik ([0e6202d](0e6202d)), closes [#166](#166) * Merge pull request #167 from VenusProtocol/fix/vpd-29-quantstamp-audit ([5cbda76](5cbda76)), closes [#167](#167) * Merge pull request #168 from VenusProtocol/fix/lz-config ([abe1456](abe1456)), closes [#168](#168) * Merge pull request #169 from VenusProtocol/ci/oidc-npm-publish ([07eecc9](07eecc9)), closes [#169](#169) * Merge pull request #170 from VenusProtocol/feat/vpd-485-acm ([752235f](752235f)), closes [#170](#170) * Merge pull request #171 from VenusProtocol/develop ([213547a](213547a)), closes [#171](#171) * Revert "fix: ensure latest update always processed" ([7f3fd43](7f3fd43)) * Revert "fix: RSR-07 | Disabled Function Does Nothing" ([1895ef7](1895ef7)) * chore: 👕 ([2832d52](2832d52)) * chore: add missing configuration for bera bartio ([6bcefa9](6bcefa9)) * chore: fix natspec ([5504839](5504839)) * chore: lock ([25b81d6](25b81d6)) * chore: move to warn to avoid changing published contracts ([4032a2d](4032a2d)) * chore: remove unused Risk Steward v1 deployments ([d8792a2](d8792a2)) * chore: set ordering lint rule to error ([109ac05](109ac05)) * chore: update node version ([828a152](828a152)) * chore: update permissions granted on all networks ([752a623](752a623)) * chore: update permissions granted on bsc network ([57033f2](57033f2)) * chore: update permissions granted on bscmainnet ([466cbf8](466cbf8)) * chore: update testnet deployments ([b625924](b625924)) * chore: yarn ([694b785](694b785)) * chore: yarn.lock ([15ef0df](15ef0df)) * chore(release): 2.11.0-dev.1 [skip ci] ([489b03d](489b03d)) * chore(release): 2.13.1-dev.1 [skip ci] ([a8b086f](a8b086f)) * chore(release): 2.13.1-dev.2 [skip ci] ([c7577af](c7577af)) * chore(release): 2.14.0-dev.1 [skip ci] ([b013b94](b013b94)) * chore(release): 2.14.0-dev.2 [skip ci] ([dd04554](dd04554)) * chore(release): 2.14.0-dev.3 [skip ci] ([6ba9e89](6ba9e89)) * chore(release): 2.14.0-dev.4 [skip ci] ([d282460](d282460)) * chore(release): 2.14.0-dev.5 [skip ci] ([429105f](429105f)) * feat: add CollateralFactorsRiskSteward ([857da07](857da07)) * feat: add deployment script ([a90ee9f](a90ee9f)) * feat: add deployment scripts ([94d7f21](94d7f21)) * feat: add fork test setup and required package upgrades ([07145c7](07145c7)) * feat: add IRMRiskSteward and refactor ([d931e80](d931e80)) * feat: add multichain updates support ([9b6f3e7](9b6f3e7)) * feat: add pause support ([c123c49](c123c49)) * feat: add risk steward ([ed3eeb7](ed3eeb7)) * feat: add risk steward deployemnts on bsctestnet and sepolia ([63102ae](63102ae)) * feat: add risk steward deployments for bscmainnet ([0fb8a5a](0fb8a5a)) * feat: add risk steward testnet deployments on all chains ([4539a76](4539a76)) * feat: add RiskOracle ([71a82c3](71a82c3)) * feat: add RiskSteward deployments ([56ce494](56ce494)) * feat: add slim package scripts ([8f5df9c](8f5df9c)) * feat: add slim package scripts ([d3d36a5](d3d36a5)) * feat: add testnet chaos labs risk oracle ([1dbe33c](1dbe33c)) * feat: add testnet deployments ([657fdd4](657fdd4)) * feat: add timelock support for risk-steward updates ([101ad3c](101ad3c)) * feat: allow immediate execution for safe-delta updates and refactor ([0efe2f5](0efe2f5)) * feat: bscmainnet deployment of RiskStewards ([90fd000](90fd000)) * feat: deploy on ethereum mainnet ([d2e81b5](d2e81b5)) * feat: deployed aggregator ([baa7bb8](baa7bb8)) * feat: deployed contracts ([5f526e5](5f526e5)) * feat: expose functions to fetch update types and their count ([0bd5888](0bd5888)) * feat: pin ACM compiler version for deterministic builds ([53d5e23](53d5e23)) * feat: redeployed contracts ([3a2580e](3a2580e)) * feat: updating deployment files ([2c0da57](2c0da57)) * feat: updating deployment files ([097df33](097df33)) * feat: updating deployment files ([17d7db8](17d7db8)) * feat: updating deployment files ([3ef69fe](3ef69fe)) * feat: updating deployment files ([81d2d10](81d2d10)) * feat: updating deployment files ([42e4fa1](42e4fa1)) * feat: updating deployment files ([0673646](0673646)) * feat: updating deployment files ([15a6284](15a6284)) * feat: updating deployment files ([db527f1](db527f1)) * feat: updating deployment files ([d9d7684](d9d7684)) * build: accommodate the Trusted Publisher way to release ([e4152f6](e4152f6)) * ci: fix hardhat compiler download failures ([f5124ff](f5124ff)) * ci: update node version in test job ([25c4d6c](25c4d6c)) * ci: use trusted publisher for npm release ([884ce23](884ce23)) * fix: 👕 lint line length ([3ca0283](3ca0283)) * fix: [I02] [I03] Code Optimization ([8349b9b](8349b9b)) * fix: [M01] ([687ecac](687ecac)) * fix: [M01] Timelock and expiration time mismatch may cause update execution failure ([b6ba91b](b6ba91b)) * fix: [S1] Inconfigurable REMOTE_DELAY ([aedaeb0](aedaeb0)) * fix: [S2] Missing Input Validation ([9967888](9967888)) * fix: [S3] Missing renounceOwnership() Override ([631a04f](631a04f)) * fix: [S4] ([c9b02ac](c9b02ac)) * fix: [S4] [S7] RiskOracle Mappings Can Be Improved ([1865fac](1865fac)) * fix: [S6] Code Clones ([fe4ea95](fe4ea95)) * fix: [S8] Inconsistent Error Handling ([a2612b2](a2612b2)) * fix: [S9] Misaligned Comments ([95b8efc](95b8efc)) * fix: [VEN-1] Multiple Debounce for Cross-Chain Calls ([d2ac393](d2ac393)) * fix: [VRR-01] Array Length Is Not Cached ([ec4ff8a](ec4ff8a)) * fix: [VRR-04] Discussion On Use Of OAppUpgradeable ([9ae58f7](9ae58f7)) * fix: [VRR-10] Missing Checks ([5b47b4f](5b47b4f)) * fix: [VRR-15] CollateralFactorsRiskSteward May Allow Unsupported Update Type ([9a46116](9a46116)) * fix: [VRR-16] delete Keyword Can Be Used ([0a55a89](0a55a89)) * fix: [VRR-20] Inconsistent Expiration Logic For Remote Updates ([9a03fcd](9a03fcd)) * fix: [VRR-21] Not All Contracts Disable Renouncing Ownership ([8a8f3e5](8a8f3e5)) * fix: [VRR-23] Incomplete/Missing Comments ([d6d20bb](d6d20bb)) * fix: [VRR-27] Misleading Name ([a93643d](a93643d)) * fix: add back deployments ([bce2526](bce2526)) * fix: add missing lz config for opbnbtestnet ([2d03418](2d03418)) * fix: add missing NatSpec and update custom error ([d10cdfe](d10cdfe)) * fix: add repo URL ([e6db68d](e6db68d)) * fix: after review (ts only) ([a7b2c11](a7b2c11)) * fix: CI checks ([4f1332c](4f1332c)) * fix: ci faliure ([244c349](244c349)) * fix: deployed on basesepolia ([d7b6f7f](d7b6f7f)) * fix: deployed on testnet ([61c48b1](61c48b1)) * fix: deployment script nonce issue ([ee81227](ee81227)) * fix: enforce id is the latest per market and type ([81beef1](81beef1)) * fix: enforce whitelisted executors for rejection and drop LI update support ([f02e723](f02e723)) * fix: ensure latest update always processed ([0fef56a](0fef56a)) * fix: extract modifier and update lz options ([bd71012](bd71012)) * fix: fixed lint ([257958e](257958e)) * fix: improve function names and events ([ae83d48](ae83d48)) * fix: lint ([515eec0](515eec0)) * fix: lint error ([78344c9](78344c9)) * fix: MCR-03 | Event Not Indexed ([2a9a302](2a9a302)) * fix: MCR-04 | Usage of Magic Numbers ([c28304a](c28304a)) * fix: MCR-06 | Unnecessary Inheritance ([594f67f](594f67f)) * fix: merge conflict ([a66f68e](a66f68e)) * fix: merge conflict ([0fbd181](0fbd181)) * fix: move auth check to external functions ([c0f9558](c0f9558)) * fix: NPM token env var ([9fcaf7e](9fcaf7e)) * fix: pin to workspace ([d5120f9](d5120f9)) * fix: redeploy CF and IRM steward on sepolia ([0931021](0931021)) * fix: remove extra space ([3e7ed60](3e7ed60)) * fix: removed deployments ([d62deae](d62deae)) * fix: removed ds store ([c82388d](c82388d)) * fix: removed solcinputs ([5d27492](5d27492)) * fix: resolve comments ([274034f](274034f)) * fix: resolve pr comments ([9f3b290](9f3b290)) * fix: revert bnbmainnet permission updates ([34b53a3](34b53a3)) * fix: revert new line ([f997129](f997129)) * fix: revert timelock change ([8e6425a](8e6425a)) * fix: RIS-1Markets with Zero Caps Cannot Be Updated by the Risk Steward ([11ac996](11ac996)) * fix: RSR-01 | User-Defined Getters ([b19329a](b19329a)) * fix: RSR-02 | Repeat Calculation ([c4b8279](c4b8279)) * fix: RSR-05 | Missing Zero Address Validation ([dbb8aca](dbb8aca)) * fix: RSR-06 | Indexed Dynamic Data Type In Event ([52c41ee](52c41ee)) * fix: RSR-07 | Disabled Function Does Nothing ([63a2850](63a2850)) * fix: RSV-03 | Missing Input Validation ([665195a](665195a)) * fix: RSV-03 | Missing Input Validation ([e89efde](e89efde)) * fix: RSV-04 | Typos And Inconsistencies ([5e94c1c](5e94c1c)) * fix: RSV-05 | Unnecessary Imports ([f41a600](f41a600)) * fix: S1 Code NatSpec Improvements ([cf13d9f](cf13d9f)) * fix: S2 Upgradeable Contract Storage Gaps ([575e255](575e255)) * fix: S3 Gas Optimization in _decodeBytesToUint256() ([4db7862](4db7862)) * fix: S4 Ownership Can Be Renounced ([e4558bf](e4558bf)) * fix: streamline process-update ([d264915](d264915)) * fix: suppress oz upgrade-safety constructor error in tests ([98d9b43](98d9b43)) * fix: test ([b18d733](b18d733)) * fix: testnet deployments ([82f532a](82f532a)) * fix: tests ([4dc6a54](4dc6a54)) * fix: update mock access control init ([6ce419a](6ce419a)) * fix: update natspec ([7f20b3f](7f20b3f)) * fix: Update storage gap to account for constants ([0b927fe](0b927fe)) * fix: upgrade verify plugin ([17e3c9a](17e3c9a)) * fix: use hardhat verify ([d2f1158](d2f1158)) * fix: use timelock instead of guardian ([37c732b](37c732b)) * fix: VPB-01 | Missing Or Incomplete Natspec ([a774dd6](a774dd6)) * fix: yarn-lock ([13141c3](13141c3)) * fix: yarn-lock ([d0969cd](d0969cd)) * docs: add audit reports for Risk Stewards V1 ([210d1e5](210d1e5)) * docs: add audit reports for risk stewards v2 ([b4b9fc4](b4b9fc4)) * docs: update natspec to include shape of update ([d983c90](d983c90)) * revert: rollback base Sepolia deployments ([597cea2](597cea2)) * refactor: add access control manager ([ef66f5e](ef66f5e)) * refactor: add risk param config validation ([8d600bb](8d600bb)) * refactor: allow resend-remote-update to pass optional fee ([2d81a84](2d81a84)) * refactor: break out update logic to specific contract ([d29694a](d29694a)) * refactor: check that constructor addresses are nonzero ([14f3668](14f3668)) * refactor: design improvements ([b12aa63](b12aa63)) * refactor: DestinationStewardReceiver ([f0bbad7](f0bbad7)) * refactor: execute-update to prevent reentrancy risk ([a074696](a074696)) * refactor: improvements in destination-steward-receiver ([3d3461e](3d3461e)) * refactor: initial refactor ([4e1cf5c](4e1cf5c)) * refactor: make riskParameterConfigs public ([147491b](147491b)) * refactor: make update types constants ([eb79014](eb79014)) * refactor: move gap to storage definition block ([b34dac1](b34dac1)) * refactor: natspecs and minor improvements ([5e9cefa](5e9cefa)) * refactor: optimize MaxIncreaseBpsUpdated event variables ([a0614ce](a0614ce)) * refactor: processUpdates must come from RiskStewardReceiver ([f24b93c](f24b93c)) * refactor: receiver contract ([66df110](66df110)) * refactor: remove Executable from UpdateStatus ([675e568](675e568)) * refactor: remove unnecessary complexity and streamline implementation ([2b03837](2b03837)) * refactor: rename market cap update types ([46a8f75](46a8f75)) * refactor: revert renounceOwnership ([ab5fd54](ab5fd54)) * refactor: support lower cap changes ([d6615aa](d6615aa)) * refactor: update events to include previous values, and toggle config active event ([9ef21ee](9ef21ee)) * refactor: update natspec ([90b22c2](90b22c2)) * refactor: use openzepplin paused ([9dc0613](9dc0613)) * test: add fork test to cover main execution paths ([66b0659](66b0659)) * test: add initial setup and cover main execution paths ([ae1fd50](ae1fd50)) * test: add risk-oracle unit tests ([fb1f0ef](fb1f0ef)) * test: cover failure scenarios ([37b89a7](37b89a7)) * test: extend coverage to all update type ([b2785e6](b2785e6)) * cd: publish slim package ([8753311](8753311)) * cd: publish slim package ([327c96f](327c96f))
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Fixes the NPM_TOKEN env var name issue