Skip to content

v0.4.13

Choose a tag to compare

@github-actions github-actions released this 29 Jun 17:35
Immutable release. Only release title and notes can be modified.
v0.4.13

fix(ci): strip injected _authToken so npm OIDC exchange fires

actions/setup-node writes an empty _authToken to NPM_CONFIG_USERCONFIG;
npm sees it and skips the OIDC trusted-publishing exchange. Strip the line
before publishing so npm falls through to request + exchange the GitHub
Actions OIDC token.

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com