From 58f668bcd8021a975d448334ea76b9defd309904 Mon Sep 17 00:00:00 2001
From: Aymeric Rabot <aymeric@pascal.app>
Date: Thu, 10 Sep 2026 00:04:42 -0400
Subject: [PATCH] fix(ci): restore OIDC for CLI publishing

---
 .github/workflows/release.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 78667fc1b..b0659a8d6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -354,8 +354,7 @@ jobs:
 
       - name: Publish CLI
         if: inputs.package == 'cli' || inputs.package == 'all'
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        # Keep token auth unset so npm can exchange the GitHub OIDC identity.
         run: |
           cd packages/cli
           if [ "${{ inputs.dry-run }}" = "true" ]; then