From 55309937a83ff5799d2561431260f84fe71a9091 Mon Sep 17 00:00:00 2001 From: Minsu Lee Date: Fri, 19 Dec 2025 22:37:59 +0900 Subject: [PATCH] fix(ci): disable npm provenance for private repository npm provenance only works with public repositories. Use OIDC id-token for npm trusted publishing without provenance. --- .github/workflows/release-please.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 1a19373..21dcb78 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -69,9 +69,11 @@ jobs: - name: Build npm packages run: bun run build:npm - - name: Publish to npm with provenance + - name: Publish to npm run: | for dir in npm/code-*; do - (cd "$dir" && npm publish --access public --provenance) + (cd "$dir" && npm publish --access public) done - cd npm/code && npm publish --access public --provenance + cd npm/code && npm publish --access public + env: + NPM_CONFIG_PROVENANCE: false