From ddc7b6853e7e1df26e6062eb1bd1a2c007cc493d Mon Sep 17 00:00:00 2001 From: Lucas McDonald Date: Wed, 22 Jul 2026 14:42:02 -0700 Subject: [PATCH 1/3] fix(release): drop --unsafe-perm from publish npm ci --- .github/workflows/prod-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/prod-release.yml b/.github/workflows/prod-release.yml index 8b0e84697..cdcebc0d4 100644 --- a/.github/workflows/prod-release.yml +++ b/.github/workflows/prod-release.yml @@ -109,7 +109,7 @@ jobs: # Ensure npm 11.5.1 or later is installed - name: Update npm run: npm install -g npm@latest - - run: npm ci --unsafe-perm + - run: npm ci - run: npm run build --if-present - run: npx lerna publish from-package --yes --dist-tag "$DIST_TAG" env: From 7576fe2be634bffe2c3e17e71f2316ca45328ff9 Mon Sep 17 00:00:00 2001 From: Lucas McDonald Date: Wed, 22 Jul 2026 14:46:02 -0700 Subject: [PATCH 2/3] chore(release): remove stale npm version comment --- .github/workflows/prod-release.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/prod-release.yml b/.github/workflows/prod-release.yml index cdcebc0d4..1703fea46 100644 --- a/.github/workflows/prod-release.yml +++ b/.github/workflows/prod-release.yml @@ -106,7 +106,6 @@ jobs: node-version: '22.22.1' registry-url: 'https://registry.npmjs.org' - # Ensure npm 11.5.1 or later is installed - name: Update npm run: npm install -g npm@latest - run: npm ci From 326832276b85e9a9233bf303fd5a500b63db6609 Mon Sep 17 00:00:00 2001 From: Lucas McDonald Date: Wed, 22 Jul 2026 22:10:48 +0000 Subject: [PATCH 3/3] fix(release): remove NPM_CONFIG_UNSAFE_PERM from workflow env The publish job upgrades to npm@latest, which rejects the removed unsafe-perm config. Dropping the --unsafe-perm CLI flag alone was insufficient: the workflow-level NPM_CONFIG_UNSAFE_PERM env var sets the same config key for every step, so remove it too. --- .github/workflows/prod-release.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/prod-release.yml b/.github/workflows/prod-release.yml index a3cfff6b1..bb00bfb85 100644 --- a/.github/workflows/prod-release.yml +++ b/.github/workflows/prod-release.yml @@ -17,7 +17,6 @@ on: env: NODE_OPTIONS: "--max-old-space-size=4096" - NPM_CONFIG_UNSAFE_PERM: true jobs: pre-release-ci: