Skip to content

Commit ca5644f

Browse files
authored
chore: disable npm caching in release workflow (#460)
Remove `cache: 'npm'` from all three jobs in the release workflow (prepare-release, test-and-build, publish-npm) to ensure fresh dependency installs during releases per security review.
1 parent ac62c4e commit ca5644f

File tree

1 file changed

+0
-3
lines changed

1 file changed

+0
-3
lines changed

.github/workflows/release.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,6 @@ jobs:
5353
uses: actions/setup-node@v6
5454
with:
5555
node-version: 20.x
56-
cache: 'npm'
5756

5857
- name: Configure git
5958
run: |
@@ -218,7 +217,6 @@ jobs:
218217
uses: actions/setup-node@v6
219218
with:
220219
node-version: 20.x
221-
cache: 'npm'
222220

223221
- name: Install dependencies
224222
run: npm ci
@@ -307,7 +305,6 @@ jobs:
307305
uses: actions/setup-node@v6
308306
with:
309307
node-version: 22.x
310-
cache: 'npm'
311308
registry-url: 'https://registry.npmjs.org'
312309

313310
- name: Ensure npm 11.5.1+ for trusted publishing

0 commit comments

Comments
 (0)