From 3da450a55db1797c9883c375ce7d82b55c8e054a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 13 Mar 2026 14:26:29 +0000 Subject: [PATCH 1/2] Initial plan From 95739e276f4af69558feebdc988dd01f97045374 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 13 Mar 2026 14:42:01 +0000 Subject: [PATCH 2/2] Fix npm trusted publishing: clear NODE_AUTH_TOKEN to allow OIDC exchange Co-authored-by: einari <134365+einari@users.noreply.github.com> --- .github/workflows/publish.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index fc7acf0..e71cd3c 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -64,7 +64,7 @@ jobs: - name: Get yarn cache directory path id: yarn-cache-dir-path - run: echo "::set-output name=dir::$(yarn cache dir)" + run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT - name: Setup node uses: actions/setup-node@v4 @@ -74,7 +74,7 @@ jobs: - run: npm install -g npm@latest - - uses: actions/cache@v3 + - uses: actions/cache@v4 id: yarn-cache with: path: | @@ -91,6 +91,8 @@ jobs: run: | yarn build yarn publish-version ${{ needs.release.outputs.version }} + env: + NODE_AUTH_TOKEN: '' - name: Git reset (package.json files changed) run: |