From 12256c7fea71b50bc35622adfa1993eba3a7b4e6 Mon Sep 17 00:00:00 2001
From: only-cli <only-cli@users.noreply.github.com>
Date: Tue, 18 Aug 2026 10:01:12 -0400
Subject: [PATCH] publish: drop OIDC debug logging now that trusted publishing
 works

---
 .github/workflows/publish.yml | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 5229354..bade2e9 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -67,14 +67,4 @@ jobs:
             npm version --no-git-tag-version "${V%%-*}-dev.${{ github.run_number }}"
           fi
           echo "CHANNEL=$CHANNEL" >> "$GITHUB_ENV"
-      - name: show OIDC claims npm will see
-        run: |
-          T=$(curl -sS -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
-            "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=npm:registry.npmjs.org" | node -p "JSON.parse(require('fs').readFileSync(0)).value")
-          echo "$T" | cut -d. -f2 | base64 -d 2>/dev/null | node -p "
-            const c = JSON.parse(require('fs').readFileSync(0));
-            ['repository','repository_owner','workflow_ref','job_workflow_ref','environment','event_name','ref','aud']
-              .map(k => k + ': ' + JSON.stringify(c[k])).join('\n')"
-      - run: |
-          npm --version
-          npm publish --access public --tag "$CHANNEL" --loglevel http
+      - run: npm publish --access public --tag "$CHANNEL"