From 96ee922622f5b4405e3eefac914dbaf2cc0b8074 Mon Sep 17 00:00:00 2001
From: Eric Crosson <ericcrosson@bitgo.com>
Date: Tue, 21 Jul 2026 13:53:07 -0500
Subject: [PATCH] ci: enable npm trusted publishing

The release job injected NPM_TOKEN even though trusted publishing gets
credentials from GitHub Actions OIDC. Removing the legacy token matches
the known working BitGoWASM release workflow at commit 204625c.

Ticket: AI-742
---
 .github/workflows/release.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 01294047..2ed3d00b 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -48,4 +48,3 @@ jobs:
         run: npx multi-semantic-release --sequential-init
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}