From 4a9ee8ee71283417eb8261ed8ca0b41562782299 Mon Sep 17 00:00:00 2001 From: Vojtech Novak Date: Mon, 23 Feb 2026 09:40:35 +0100 Subject: [PATCH] ci: clear node token to use OIDC for npm publishing --- .github/workflows/release.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 377220a..429f6e1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -38,4 +38,6 @@ jobs: - run: yarn install --frozen-lockfile if: ${{ steps.release.outputs.release_created || github.event_name == 'workflow_dispatch' }} - run: npm publish --provenance --access public + env: + NODE_AUTH_TOKEN: '' # Clear the secret, if provided, so npm publishes via OIDC if: ${{ steps.release.outputs.release_created || github.event_name == 'workflow_dispatch' }}