From d03d77b11043bbcddd96ba9a7833db137a6bbafb Mon Sep 17 00:00:00 2001
From: Kevin Codex <kevin@gitlawb.com>
Date: Mon, 13 Apr 2026 00:18:43 +0800
Subject: [PATCH] ci: keep manual publish path for current release (#626)

---
 .github/workflows/release.yml | 39 +++--------------------------------
 1 file changed, 3 insertions(+), 36 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 629aabf1..8ad658f3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -76,43 +76,10 @@ jobs:
       - name: Dry-run package
         run: npm pack --dry-run
 
-      - name: Debug GitHub context
+      - name: Clear token auth for trusted publishing
         run: |
-          echo "repository=$GITHUB_REPOSITORY"
-          echo "ref=$GITHUB_REF"
-          echo "workflow=$GITHUB_WORKFLOW"
-          echo "job=$GITHUB_JOB"
-          echo "actor=$GITHUB_ACTOR"
-          echo "sha=$GITHUB_SHA"
-
-      - name: Debug OIDC token claims
-        run: |
-          python - <<'PY'
-          import base64
-          import json
-          import os
-          import urllib.request
-
-          req = urllib.request.Request(
-              os.environ["ACTIONS_ID_TOKEN_REQUEST_URL"] + "&audience=npm:registry.npmjs.org",
-              headers={"Authorization": f"Bearer {os.environ['ACTIONS_ID_TOKEN_REQUEST_TOKEN']}"},
-          )
-          token = json.load(urllib.request.urlopen(req))["value"]
-          payload = token.split(".")[1]
-          payload += "=" * (-len(payload) % 4)
-          claims = json.loads(base64.urlsafe_b64decode(payload))
-
-          for key in [
-              "iss",
-              "sub",
-              "aud",
-              "repository",
-              "repository_owner",
-              "job_workflow_ref",
-              "environment",
-          ]:
-              print(f"{key}={claims.get(key)}")
-          PY
+          unset NODE_AUTH_TOKEN
+          echo "NODE_AUTH_TOKEN=" >> "$GITHUB_ENV"
 
       - name: Publish to npm
         run: npm publish --access public --provenance