From dc6ad0b54cef153a5bf5bccfa2ff057ff7723940 Mon Sep 17 00:00:00 2001
From: Michael Telatynski <7t3chguy@gmail.com>
Date: Tue, 4 Nov 2025 13:33:55 +0000
Subject: [PATCH] Fix npm publish script (#5068)

The `id` is also an output from this workflow so needs re-adding, not sure how the token stuck around, I thought I removed that
---
 .github/workflows/release-npm.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml
index de2bf15f9..9afc6a3eb 100644
--- a/.github/workflows/release-npm.yml
+++ b/.github/workflows/release-npm.yml
@@ -36,7 +36,10 @@ jobs:
               run: "yarn install --frozen-lockfile"
 
             - name: 🚀 Publish to npm
-              run: npm publish --provenance --access public --tag "$TAG"
+              id: npm-publish
+              run: |
+                  npm publish --provenance --access public --tag "$TAG"
+                  release=$(jq -r '"\(.name)@\(.version)"' package.json)
+                  echo "id=$release" >> $GITHUB_OUTPUT
               env:
-                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
                   TAG: ${{ contains(steps.npm-publish.outputs.id, '-rc.') && 'next' || 'latest' }}