From 11b299ae16382b8df1069c44801027272494f0b2 Mon Sep 17 00:00:00 2001 From: Ray Walker Date: Sun, 26 Apr 2026 23:10:10 +1000 Subject: [PATCH 1/2] =?UTF-8?q?fix:=20pnpm=20publish=20auth=20=E2=80=94=20?= =?UTF-8?q?write=20.npmrc=20explicitly?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit setup-node's .npmrc template uses ${NODE_AUTH_TOKEN} which npm expands but pnpm doesn't pick up reliably. Write the auth token to ~/.npmrc directly before pnpm publish. --- .github/workflows/release-please.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 9434e88..fe0899c 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -79,8 +79,14 @@ jobs: - name: Test run: pnpm test + - name: Configure npm auth + run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc + env: + NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + - name: Publish to npm working-directory: packages/cachekit run: pnpm publish --access public --provenance --no-git-checks env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} + NPM_CONFIG_PROVENANCE: true From 4e98703c8c06cd36f368b936dabcd477063228c8 Mon Sep 17 00:00:00 2001 From: Ray Walker Date: Tue, 28 Apr 2026 08:52:52 +1000 Subject: [PATCH 2/2] chore: remove redundant NPM_CONFIG_PROVENANCE env var --provenance flag on pnpm publish already controls this. --- .github/workflows/release-please.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index fe0899c..6367319 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -89,4 +89,3 @@ jobs: run: pnpm publish --access public --provenance --no-git-checks env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} - NPM_CONFIG_PROVENANCE: true