From: Ardis Lu <ardisglu@gmail.com>
Date: Mon, 8 Jun 2026 02:44:25 +0000 (-0700)
Subject: Disable `package-manager-cache`
X-Git-Tag: v0.1.11~4
X-Git-Url: https://git.ardis.lu/?a=commitdiff_plain;h=ccf41b68b7516fa8851a978eef8d245c970b484f;p=csvio

Disable `package-manager-cache`

From `setup-node`'s `README`: "For workflows with elevated privileges or access to sensitive information, we recommend disabling automatic caching ... when caching is not required for secure operation."
---

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0c6511c..928c406 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,6 +33,7 @@ jobs:
         with:
           node-version-file: ".node-version"
           registry-url: "https://registry.npmjs.org"
+          package-manager-cache: false
       - run: npm install -g npm@latest # npm >=11.5.1 required for trusted publishing
       - run: npm ci
       - run: npm publish --provenance --access public