From 94653b32fd7e78bb34d7e927923ad6ea615be60d Mon Sep 17 00:00:00 2001 From: Harkaran Brar Date: Mon, 30 Mar 2026 21:52:57 -0700 Subject: [PATCH] fix: force pure OIDC auth in release workflow Remove npm registry token configuration from setup-node and clear NODE_AUTH_TOKEN in changesets step to avoid empty-token auth path during trusted publishing. --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index de894d7..8757144 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,7 +24,6 @@ jobs: uses: actions/setup-node@v4 with: node-version: 20.x - registry-url: https://registry.npmjs.org cache: npm - name: Install dependencies @@ -45,3 +44,4 @@ jobs: commit: "chore: release packages" env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + NODE_AUTH_TOKEN: ""