From b7a79d9ee27aa7a61513785d85d8242141ca00b8 Mon Sep 17 00:00:00 2001
From: Jordan Ritter <jordan@copilotkit.ai>
Date: Mon, 6 Apr 2026 11:04:40 -0700
Subject: [PATCH] ci: clear placeholder auth token so npm uses OIDC for
 publishing

---
 .github/workflows/publish-release.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 30f65dc..f12705e 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -35,7 +35,10 @@ jobs:
 
       - name: Build and publish
         if: steps.check.outputs.published == 'false'
-        run: pnpm build && npm publish --access public --provenance
+        run: |
+          # Clear the placeholder token so npm uses OIDC instead
+          npm config set //registry.npmjs.org/:_authToken ""
+          pnpm build && npm publish --access public --provenance
 
       - name: Ensure git tag exists
         if: steps.check.outputs.published == 'false'