comments

BoundaryML · Dec 13, 2024 · 32266aa · 32266aa
1 parent 5f5bdcf
commit 32266aa
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -108,7 +108,7 @@ jobs:
           node-version: 20
           cache: pnpm
           cache-dependency-path: engine/language_client_typescript/pnpm-lock.yaml
-          # This is load-bearing: it writes NPM_TOKEN to .npmrc, which is what
+          # This is load-bearing: it writes NODE_AUTH_TOKEN to .npmrc, which is what
           # npm publish relies on.
           # See https://github.com/npm/cli/issues/6184#issuecomment-1544496444
           registry-url: "https://registry.npmjs.org"
@@ -135,8 +135,9 @@ jobs:
         working-directory: engine/language_client_typescript
 
       - name: Publish
-        run: |
-          npm publish --access public
+        # This reads the credential from .npmrc, which is written by the setup-node step.
+        # It does not use the NODE_AUTH_TOKEN environment variable.
+        run: npm publish --access public
         working-directory: engine/language_client_typescript
 
   # publish-to-rubygems: