Avoid writing NPM_AUTH_TOKEN to disk

Author: Gerrit0

.github/workflows/publish-beta.yml

@@ -28,11 +28,10 @@ jobs:
             - name: Test
               if: steps.check.outputs.changed == 'true' && contains(steps.check.outputs.version, 'beta')
               run: pnpm test
-            - name: Setup publish token
-              if: steps.check.outputs.changed == 'true' && contains(steps.check.outputs.version, 'beta')
-              run: echo "//registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}" > .npmrc
-              env:
-                  NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
             - name: Publish
               if: steps.check.outputs.changed == 'true' && contains(steps.check.outputs.version, 'beta')
+              # We need --no-git-checks because we swap a boolean to allow more lax types
+              # in the published package.
               run: pnpm publish --tag beta --no-git-checks
+              env:
+                npm_config_//registry.npmjs.org/:_authToken: ${{ secrets.NPM_AUTH_TOKEN }}

.github/workflows/publish-lts.yml

@@ -28,11 +28,10 @@ jobs:
             - name: Test
               if: steps.check.outputs.changed == 'true'
               run: pnpm test
-            - name: Setup publish token
-              if: steps.check.outputs.changed == 'true'
-              run: echo "//registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}" > .npmrc
-              env:
-                  NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
             - name: Publish
               if: steps.check.outputs.changed == 'true'
+              # We need --no-git-checks because we swap a boolean to allow more lax types
+              # in the published package.
               run: pnpm publish --tag lts --no-git-checks
+              env:
+                npm_config_//registry.npmjs.org/:_authToken: ${{ secrets.NPM_AUTH_TOKEN }}

.github/workflows/publish.yml

@@ -30,14 +30,13 @@ jobs:
             - name: Test
               if: steps.check.outputs.changed == 'true'
               run: pnpm test
-            - name: Setup publish token
-              if: steps.check.outputs.changed == 'true'
-              run: echo "//registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}" > .npmrc
-              env:
-                  NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
             - name: Publish
               if: steps.check.outputs.changed == 'true'
+              # We need --no-git-checks because we swap a boolean to allow more lax types
+              # in the published package.
               run: pnpm publish --no-git-checks
+              env:
+                npm_config_//registry.npmjs.org/:_authToken: ${{ secrets.NPM_AUTH_TOKEN }}
             - name: Generate Release
               if: steps.check.outputs.changed == 'true'
               run: |