Disable `package-manager-cache`

From `setup-node`'s `README`: "For workflows with elevated privileges or access to sensitive information, we recommend disabling automatic caching ... when caching is not required for secure operation."

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index afee0b8e74ee9592e05dc755f28b495c10e02d8a..ac2d56781a3f632ac9a53e906b6c1dde18052ff4 100644 (file)
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,6 +33,7 @@ jobs:
         with:
           node-version-file: ".node-version"
           registry-url: "https://registry.npmjs.org"
+          package-manager-cache: false
       - run: npm install -g npm@latest
       - run: npm ci
       - run: npm publish --provenance --access public
\ No newline at end of file