From adaeaca8e93c92e8a682a0c80b28f3942e679c1c Mon Sep 17 00:00:00 2001 From: YeonGyu-Kim Date: Sun, 8 Mar 2026 03:36:52 +0900 Subject: [PATCH] fix: add NODE_AUTH_TOKEN to publish-main job for npm auth The publish-main job relied on npm trusted publishing (OIDC) which broke after the repo rename from oh-my-opencode to oh-my-openagent. Adding explicit NODE_AUTH_TOKEN restores auth while --provenance still uses OIDC for Sigstore attestation. Fixes #2373 --- .github/workflows/publish.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 8f95aeae4..f22c81ce4 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -213,8 +213,8 @@ jobs: fi npm publish --access public --provenance $TAG_ARG env: + NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }} NPM_CONFIG_PROVENANCE: true - - name: Publish oh-my-openagent if: steps.check.outputs.skip != 'true' run: | @@ -242,8 +242,8 @@ jobs: fi npm publish --access public --provenance $TAG_ARG || echo "oh-my-openagent publish may have failed (package may already exist)" env: + NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }} NPM_CONFIG_PROVENANCE: true - - name: Restore package.json if: steps.check.outputs.skip != 'true' run: |