From bbe5124800d630431bb908ebcd7627ce5702af3e Mon Sep 17 00:00:00 2001 From: Anton Pascal Date: Wed, 18 Feb 2026 21:46:41 +0000 Subject: [PATCH] =?UTF-8?q?fix:=20proper=20auth=20=E2=80=94=20NPM=5FTOKEN?= =?UTF-8?q?=20env=20+=20OIDC=20provenance?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Previous runs had NODE_AUTH_TOKEN set to a garbage placeholder because we removed the env var from publish steps. Now properly passing secrets.NPM_TOKEN as NODE_AUTH_TOKEN. --- .github/workflows/release.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 46b64d25..56b91812 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -41,7 +41,7 @@ jobs: - uses: actions/setup-node@v4 with: - node-version: 20 + node-version: 22 registry-url: "https://registry.npmjs.org" - name: Install dependencies @@ -55,6 +55,8 @@ jobs: - name: Bump & publish core if: inputs.package == 'core' || inputs.package == 'both' working-directory: packages/core + env: + NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} run: | npm version ${{ inputs.bump }} --no-git-tag-version VERSION=$(node -p "require('./package.json').version") @@ -66,17 +68,15 @@ jobs: echo "🏜️ Dry run — would publish @pascal-app/core@$VERSION" npm publish --dry-run --access public else - npm publish --access public --provenance 2>&1 || { - echo "❌ Publish failed. Debug log:" - cat ~/.npm/_logs/*-debug-0.log 2>/dev/null | tail -80 - exit 1 - } + npm publish --access public --provenance echo "📦 Published @pascal-app/core@$VERSION" fi - name: Bump & publish viewer if: inputs.package == 'viewer' || inputs.package == 'both' working-directory: packages/viewer + env: + NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} run: | npm version ${{ inputs.bump }} --no-git-tag-version VERSION=$(node -p "require('./package.json').version")