From 68db33163438deef76578a52d8064c01411de8c4 Mon Sep 17 00:00:00 2001
From: jpb06 <jpb.06@outlook.com>
Date: Sat, 10 Jan 2026 22:20:23 +0100
Subject: [PATCH] fix(publish): clear node auth token

---
 .github/workflows/release.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 58423ec..1f74964 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,6 +55,8 @@ jobs:
       - name: 🚀 Publish package
         id: publish
         if: ${{ steps.release.outputs.release_created }}
-        run: NODE_AUTH_TOKEN="" npm publish ./dist --access public --provenance
         env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
+          NPM_CONFIG_PROVENANCE: 'true'
+          NODE_AUTH_TOKEN: ''  # Clear placeholder set by setup-node to enable OIDC
+        run: npm publish ./dist --access public --provenance
+