fix npm token issue while publishing

Author: kfirstri

.github/workflows/manual-publish.yml

@@ -112,13 +112,14 @@ jobs:
           echo "NPM tag: ${{ github.event.inputs.npm_tag }}"
           echo "Dry run: ${{ github.event.inputs.dry_run }}"
 
+      # Workaround: bun publish looks for .npmrc in $XDG_CONFIG_HOME, not $HOME
+      # https://github.com/oven-sh/bun/issues/24124
       - name: Publish to NPM
         working-directory: ${{ env.CLI_PACKAGE_DIR }}
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          XDG_CONFIG_HOME: ${{ runner.temp }}
         run: |
-          echo "//registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}" >> .npmrc
-          bun publish --tag ${{ github.event.inputs.npm_tag }} ${{ github.event.inputs.dry_run == 'true' && '--dry-run' || '' }}
+          bun publish --verbose --access public --tag ${{ github.event.inputs.npm_tag }} ${{ github.event.inputs.dry_run == 'true' && '--dry-run' || '' }}
 
       - name: Create Git tag
         if: github.event.inputs.dry_run == 'false'

.github/workflows/preview-publish.yml

@@ -117,12 +117,14 @@ jobs:
 
           echo "✅ Safety check passed. Package name is safe to publish."
 
+      # Workaround: bun publish looks for .npmrc in $XDG_CONFIG_HOME, not $HOME
+      # https://github.com/oven-sh/bun/issues/24124
       - name: Publish preview package
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          XDG_CONFIG_HOME: ${{ runner.temp }}
         run: |
-          echo "//registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}" >> .npmrc
-          if bun publish --tag preview; then
+          if bun publish --verbose --access public --tag preview; then
             echo "✅ Package published successfully"
           else
             echo "❌ Package publish failed"