Prevent lerna from using stale tokens

Author: qtm

.github/workflows/autopublish.yml

@@ -27,7 +27,6 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 20.x
-          registry-url: https://registry.npmjs.org
 
       - name: Install dependencies
         run: |
@@ -54,6 +53,9 @@ jobs:
         env:
           NPM_CONFIG_PROVENANCE: true
           NPM_CONFIG_REGISTRY: https://registry.npmjs.org/
+          NPM_CONFIG_ACCESS: public
+          NPM_CONFIG_TOKEN: ""
+          NODE_AUTH_TOKEN: ""
 
       - name: Push changes
         run: |

scripts/release.sh

@@ -3,5 +3,7 @@
 export NPM_CONFIG_PROVENANCE=${NPM_CONFIG_PROVENANCE:-true}
 export NPM_CONFIG_REGISTRY=${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org/}
 export NPM_CONFIG_ACCESS=${NPM_CONFIG_ACCESS:-public}
+export NPM_CONFIG_TOKEN=${NPM_CONFIG_TOKEN:-}
+export NODE_AUTH_TOKEN=${NODE_AUTH_TOKEN:-}
 
-./node_modules/.bin/lerna publish from-git --yes --registry "$NPM_CONFIG_REGISTRY" --no-push --no-verify-access
+./node_modules/.bin/lerna publish from-git --yes --registry "$NPM_CONFIG_REGISTRY" --no-push --no-verify-access --access "$NPM_CONFIG_ACCESS" --provenance