From c4fbe52d3a3660334f0138f94700c46cf5a137d8 Mon Sep 17 00:00:00 2001 From: Ardis Lu Date: Sun, 7 Jun 2026 19:43:43 -0700 Subject: [PATCH] Disable `package-manager-cache` From `setup-node`'s `README`: "For workflows with elevated privileges or access to sensitive information, we recommend disabling automatic caching ... when caching is not required for secure operation." --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index afee0b8..ac2d567 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -33,6 +33,7 @@ jobs: with: node-version-file: ".node-version" registry-url: "https://registry.npmjs.org" + package-manager-cache: false - run: npm install -g npm@latest - run: npm ci - run: npm publish --provenance --access public \ No newline at end of file -- 2.47.3