From c63f5c55c28284aba2bd40ed04b3df93e6d072eb Mon Sep 17 00:00:00 2001 From: sebastien Date: Wed, 11 Mar 2026 16:47:11 +0100 Subject: [PATCH] canary/trusted publishing shouldn't use any caching --- .github/workflows/publish.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2083fe662348..ce7e4c7c1584 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -28,7 +28,10 @@ jobs: uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: lts/* - cache: yarn + # ⚠️ Do not use any cache on purpose + # It increases the chance of a compromised release being publish + # See https://github.com/actions/setup-node/issues/1445#issuecomment-4040130833 + # cache: yarn - name: Prepare git run: | git config --global user.name "Docusaurus Canary"