From e189e493eccac681dbd75ee0dbbce774515a3ed9 Mon Sep 17 00:00:00 2001 From: Antonin MOREL Date: Wed, 20 May 2026 15:14:54 +0200 Subject: [PATCH] ops(ci): dont fetch NPM_TOKEN from env to support provenance --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2ad334e..e904af9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -35,4 +35,4 @@ jobs: publish: bun run changeset:publish env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + NPM_TOKEN: "" # https://github.com/changesets/changesets/issues/1152#issuecomment-3190884868