ci(publish-libraries): set NODE_AUTH_TOKEN as workaround

Author: Sylfwood

.github/workflows/publish-libraries.yml

@@ -204,23 +204,18 @@ jobs:
     needs: [preflight, npm-merge, npm-build]
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       id-token: write
 
     steps:
       - name: Check out ${{ github.repository }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: '24'
-          registry-url: 'https://registry.npmjs.org'
-
-      - name: Update npm to latest version
-        run: |
-          npm install npm@latest
-          npm -v
+          node-version: 24
+          registry-url: https://registry.npmjs.org
 
       - name: Download NPM packages artifact
         uses: actions/download-artifact@v4
@@ -251,8 +246,9 @@ jobs:
             if [ "$local_version" = "$remote_version" ]; then
               echo "Local and distant versions are identical. Skip publishing."
             else
+              # workaround for https://github.com/actions/setup-node/issues/1440
               echo "Publishing..."
-              npm publish "$tarball" --access public --provenance
+              NODE_AUTH_TOKEN="" npm publish "$tarball" --access public --provenance
             fi
 
             rm -rf "$tmp_dir"