From ccf41b68b7516fa8851a978eef8d245c970b484f Mon Sep 17 00:00:00 2001 From: Ardis Lu Date: Sun, 7 Jun 2026 19:44:25 -0700 Subject: [PATCH] Disable `package-manager-cache` From `setup-node`'s `README`: "For workflows with elevated privileges or access to sensitive information, we recommend disabling automatic caching ... when caching is not required for secure operation." --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0c6511c..928c406 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -33,6 +33,7 @@ jobs: with: node-version-file: ".node-version" registry-url: "https://registry.npmjs.org" + package-manager-cache: false - run: npm install -g npm@latest # npm >=11.5.1 required for trusted publishing - run: npm ci - run: npm publish --provenance --access public -- 2.47.3