From 01f814e8a7ad53e051c3a781d9eff27e2272db2c Mon Sep 17 00:00:00 2001
From: maatheusgois-dd <matheus.gois@doordash.com>
Date: Fri, 17 Jul 2026 03:08:37 -0300
Subject: [PATCH] fix(ci): pass NODE_AUTH_TOKEN to npm publish step

The Release workflow's Publish step ran `npm publish` without an
NODE_AUTH_TOKEN env. actions/setup-node with `registry-url` requires
NODE_AUTH_TOKEN; without it npm attempts an anonymous publish, which
npm rejects with E404 ("Not found") for packages the caller doesn't
own. This blocked every release since v0.1.25 (Jun 6).

Reference the `NPM_TOKEN` repo secret so publish can authenticate.
---
 .github/workflows/release.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d1a945c..3fe3bc4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -102,6 +102,8 @@ jobs:
 
       - name: Publish
         run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   github-release:
     name: GitHub Release