diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 56b35d8..e2c2762 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,8 @@ jobs:
         with:
           bun-version: latest
       - name: Configure npm auth
-        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc
+        # Write to $HOME, never the repo tree — otherwise the changesets commit would add it.
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > "$HOME/.npmrc"
       - run: bun install
       - name: Version or publish
         uses: changesets/action@v1