From 81939f1f6366af54516792fda1459274720093aa Mon Sep 17 00:00:00 2001 From: "witon.ai" Date: Sat, 8 Aug 2026 21:05:33 +0800 Subject: [PATCH] docs: clarify trusted publisher sequence --- docs/releasing.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/releasing.md b/docs/releasing.md index ca039af..3a15379 100644 --- a/docs/releasing.md +++ b/docs/releasing.md @@ -41,7 +41,7 @@ npm view react-acp dist-tags.latest - Environment：留空 - Allowed action：`npm publish` -确认一次 OIDC 自动发布成功后，将 Publishing access 设置为“Require two-factor authentication and disallow tokens”，并撤销不再使用的 automation token。仓库不保存 `NPM_TOKEN`。 +保存 Trusted Publisher 后，将 Publishing access 设置为“Require two-factor authentication and disallow tokens”，并撤销不再使用的 automation token。仓库不保存 `NPM_TOKEN`。 最后创建并推送首版 tag；workflow 会验证已存在的 npm 版本并创建 GitHub Release：