From: Ardis Lu <ardisglu@gmail.com>
Date: Mon, 8 Jun 2026 02:43:43 +0000 (-0700)
Subject: Disable `package-manager-cache`
X-Git-Tag: v0.1.3~9
X-Git-Url: https://git.ardis.lu/?a=commitdiff_plain;h=c4fbe52d3a3660334f0138f94700c46cf5a137d8;p=envpass

Disable `package-manager-cache`

From `setup-node`'s `README`: "For workflows with elevated privileges or access to sensitive information, we recommend disabling automatic caching ... when caching is not required for secure operation."
---

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index afee0b8..ac2d567 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,6 +33,7 @@ jobs:
         with:
           node-version-file: ".node-version"
           registry-url: "https://registry.npmjs.org"
+          package-manager-cache: false
       - run: npm install -g npm@latest
       - run: npm ci
       - run: npm publish --provenance --access public
\ No newline at end of file