[npm] Remove NPM_AUTH_TOKEN env vars for OIDC-based publishing

OIDC-based npm publishing doesn't require explicit token env vars.
The previous commit added OIDC support but left the token handling
code in place. This removes it.

Co-authored-by: Ona <[email protected]>

Author: geropl

.github/workflows/branch-build.yml

@@ -256,7 +256,6 @@ jobs:
           VERSION: ${{needs.configuration.outputs.version}}
           PR_NO_CACHE: ${{needs.configuration.outputs.build_no_cache}}
           PR_NO_TEST: ${{needs.configuration.outputs.build_no_test}}
-          NPM_AUTH_TOKEN: "${{ secrets.NPM_AUTH_TOKEN }}"
           PUBLISH_TO_NPM: ${{ needs.configuration.outputs.publish_to_npm == 'true'  || needs.configuration.outputs.is_main_branch == 'true' }}
           JB_MARKETPLACE_PUBLISH_TOKEN: "${{ secrets.JB_MARKETPLACE_PUBLISH_TOKEN }}"
           PUBLISH_TO_JBPM: ${{ needs.configuration.outputs.publish_to_jbmp == 'true'  || needs.configuration.outputs.is_main_branch == 'true' }}

.github/workflows/build.yml

@@ -259,7 +259,6 @@ jobs:
           VERSION: ${{needs.configuration.outputs.version}}
           PR_NO_CACHE: ${{needs.configuration.outputs.build_no_cache}}
           PR_NO_TEST: ${{needs.configuration.outputs.build_no_test}}
-          NPM_AUTH_TOKEN: "${{ secrets.NPM_AUTH_TOKEN }}"
           PUBLISH_TO_NPM: ${{ needs.configuration.outputs.publish_to_npm == 'true'  || needs.configuration.outputs.is_main_branch == 'true' }}
           JB_MARKETPLACE_PUBLISH_TOKEN: "${{ secrets.JB_MARKETPLACE_PUBLISH_TOKEN }}"
           PUBLISH_TO_JBPM: ${{ needs.configuration.outputs.publish_to_jbmp == 'true'  || needs.configuration.outputs.is_main_branch == 'true' }}

components/gitpod-protocol/scripts/publish.js

@@ -11,24 +11,13 @@ const path = require("path");
 const child_process = require("child_process");
 const qualifier = process.argv[2];
 
-const rootDir = process.cwd();
-const pckDir = path.join(rootDir, process.argv[3]);
+const pckDir = path.join(process.cwd(), process.argv[3]);
 
 if (process.env.DO_PUBLISH === "false") {
     console.warn("Skipping publishing per request.");
     process.exit(0);
 }
 
-if (process.env.NPM_AUTH_TOKEN) {
-    fs.writeFileSync(
-        path.join(pckDir, ".npmrc"),
-        `//registry.npmjs.org/:_authToken=${process.env.NPM_AUTH_TOKEN}\n`,
-        "utf-8",
-    );
-} else {
-    console.warn("NPM_AUTH_TOKEN env variable is not set");
-}
-
 const pck = JSON.parse(fs.readFileSync(path.join(pckDir, "package.json"), "utf-8"));
 pck.version = `${pck.version}-${qualifier}`;
 fs.writeFileSync(path.join(pckDir, "package.json"), JSON.stringify(pck, undefined, 2), "utf-8");