Skip to content

Commit 6151754

Browse files
fix: remove NODE_AUTH_TOKEN to use npm trusted publishing (OIDC)
The workflow was using NODE_AUTH_TOKEN from secrets, which overrides the OIDC-based trusted publishing flow configured on npm. Removing it lets npm authenticate via the GitHub Actions OIDC token automatically. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 25f3373 commit 6151754

1 file changed

Lines changed: 0 additions & 4 deletions

File tree

.github/workflows/publish.yml

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -47,11 +47,7 @@ jobs:
4747
- name: Publish @next
4848
if: ${{ steps.check_beta.outputs.is_beta == 'true' }}
4949
run: npm publish --access public --provenance --tag next
50-
env:
51-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
5250

5351
- name: Publish @latest
5452
if: ${{ steps.check_beta.outputs.is_beta == 'false' }}
5553
run: npm publish --access public --provenance
56-
env:
57-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

0 commit comments

Comments
 (0)