diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4d3f3958..b4abd437 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -152,10 +152,8 @@ jobs: package_spec="${package_name}@${package_version}" verify_registry_artifact() { - set +e registry_integrity="$(npm view "${package_spec}" dist.integrity 2>registry-error.log)" view_status=$? - set -e if [ "${view_status}" -ne 0 ]; then if grep -q "E404" registry-error.log; then return 2 diff --git a/CHANGELOG.md b/CHANGELOG.md index 346d4ea7..4dd92e60 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -29,6 +29,8 @@ - Add the public repository governance baseline, pinned CodeQL analysis, package tarball/import validation, and protected tag-driven npm trusted publishing with provenance and changelog-derived GitHub releases. +- Let tag-driven publishing continue from an expected registry miss into npm + trusted publishing instead of exiting before the publish attempt. ## 0.4.5 - 2026-07-20