From e7567b45381952f4e84f129a3fbdf32eb8faeb9a Mon Sep 17 00:00:00 2001 From: Kuba Adamczyk Date: Mon, 26 Jan 2026 13:11:57 +0100 Subject: [PATCH 1/2] unset NODE_AUTH_TOKEN --- .github/workflows/release.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d707aa786..87176a499 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -50,3 +50,5 @@ jobs: commitMode: github-api env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + # we use trusted publishing and setup-node will set these incorrectly. Unset if we ever use RO_TOKEN + NODE_AUTH_TOKEN: "" From 6bf88fe116e2674bf454d1fdb3ea8832333008f4 Mon Sep 17 00:00:00 2001 From: Kuba Adamczyk Date: Mon, 26 Jan 2026 13:20:09 +0100 Subject: [PATCH 2/2] add more env --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 87176a499..d0e6e14ab 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -52,3 +52,4 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # we use trusted publishing and setup-node will set these incorrectly. Unset if we ever use RO_TOKEN NODE_AUTH_TOKEN: "" + NPM_CONFIG_PROVENANCE: true