From: Haoqun Jiang <github@haoqun.me>
Date: Tue, 30 Sep 2025 01:57:10 +0000 (+0900)
Subject: ci: use trusted publisher for npm publish [skip ci]
X-Git-Tag: v3.18.2~15
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5e64df3e424d1798ccd621b11fe10fdef2a75623;p=thirdparty%2Fvuejs%2Fcreate-vue.git

ci: use trusted publisher for npm publish [skip ci]
---

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 892824ec..17768659 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -23,7 +23,8 @@ jobs:
         with:
           node-version: 'lts/*'
           registry-url: 'https://registry.npmjs.org'
+      # Ensure npm 11.5.1 or later is installed
+      - name: Update npm
+        run: npm install -g npm@latest
       - run: pnpm install
       - run: pnpm publish --no-git-checks
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}