Disable `package-manager-cache`

From `setup-node`'s `README`: "For workflows with elevated privileges or access to sensitive information, we recommend disabling automatic caching ... when caching is not required for secure operation."

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0c6511cb773b35538f2a6ef8a89eb2f75b80c58b..928c406474705a153bf056a0c812de6a4a4dcb12 100644 (file)
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,6 +33,7 @@ jobs:
         with:
           node-version-file: ".node-version"
           registry-url: "https://registry.npmjs.org"
+          package-manager-cache: false
       - run: npm install -g npm@latest # npm >=11.5.1 required for trusted publishing
       - run: npm ci
       - run: npm publish --provenance --access public