From 90f70793b82d1869d98bfee9f1ecd59a672d4cad Mon Sep 17 00:00:00 2001 From: Ricardo Vega Date: Wed, 30 Sep 2026 10:40:54 -0500 Subject: [PATCH] ci: drop temporary verbose npm logging Trusted publishing is confirmed working (1.0.5 published with provenance). Keeps the cleared placeholder NODE_AUTH_TOKEN so a failed OIDC exchange stays an explicit auth error. --- .github/workflows/ci.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 910003f..57065ff 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -163,8 +163,7 @@ jobs: # match this repo. The package has no workspace: dependencies, so npm publishes pnpm's build. run: | npm install -g npm@latest - echo "node $(node --version), npm $(npm --version)" - npm publish --access public --loglevel verbose + npm publish --access public env: # setup-node injects a placeholder token; clear it so a failed OIDC exchange # surfaces as an auth error instead of silently falling back to a bogus token.