From 0b93efada248c693b97f6e48f67edbb016bcd369 Mon Sep 17 00:00:00 2001 From: "Ronald A. Richardson" Date: Tue, 6 Oct 2026 16:01:50 +0800 Subject: [PATCH] fix(publish): pass tarball as ./ path so npm does not read it as a GitHub spec npm parses `artifacts/fleetbase-storefront-1.2.0.tgz` as the GitHub shorthand `artifacts/` and tries to git ls-remote it, which failed the v1.2.0 Publish run with "Permission denied (publickey)". --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 5597350..f868dc3 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -62,7 +62,7 @@ jobs: test "$published_integrity" = "$local_integrity" echo "$package already contains the verified release bytes" else - npm publish artifacts/*.tgz --access public --tag "$dist_tag" + npm publish ./artifacts/*.tgz --access public --tag "$dist_tag" fi - name: Verify registry metadata env: