Skip to content

Commit 0f9dc60

Browse files
committed
ci: Remove registry-url from setup-node to fix npm trusted publishing
The setup-node action with registry-url creates an .npmrc that sets NODE_AUTH_TOKEN to the GitHub token, which overrides npm's OIDC trusted publishing flow. Removing registry-url lets npm handle authentication via OIDC directly.
1 parent fb5a1f4 commit 0f9dc60

1 file changed

Lines changed: 0 additions & 2 deletions

File tree

.github/workflows/gnd-binary-build.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -214,7 +214,6 @@ jobs:
214214
- uses: actions/setup-node@v6
215215
with:
216216
node-version: 22
217-
registry-url: https://registry.npmjs.org
218217

219218
- name: Download gnd binary
220219
env:
@@ -288,7 +287,6 @@ jobs:
288287
- uses: actions/setup-node@v6
289288
with:
290289
node-version: 22
291-
registry-url: https://registry.npmjs.org
292290

293291
- name: Create wrapper package
294292
shell: bash

0 commit comments

Comments
 (0)