From 207630809d3fb38247cc449ed9f9a326546bca9f Mon Sep 17 00:00:00 2001
From: Katy Bowman <katy.bowman@salesforce.com>
Date: Wed, 21 Oct 2026 14:44:02 -0400
Subject: [PATCH] ci: remove npm token save from promote workflow

---
 .github/workflows/promote.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/promote.yml b/.github/workflows/promote.yml
index 8dc3e841..ddec5903 100644
--- a/.github/workflows/promote.yml
+++ b/.github/workflows/promote.yml
@@ -170,9 +170,7 @@ jobs:
         with:
           node-version: ${{ vars.NODE_VERSION_OVERRIDE || 'lts/*' }}
       # NOTE: If you try to use yarn here, it will use the wrong registry and throw 401s
-      - run: |
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
-          npm dist-tag add "@salesforce/cli@$NEEDS_GET_PACKAGE_INFO_VERSION" "$INPUTS_NEW_CHANNEL"
+      - run: npm dist-tag add "@salesforce/cli@$NEEDS_GET_PACKAGE_INFO_VERSION" "$INPUTS_NEW_CHANNEL"
         env:
           NEEDS_GET_PACKAGE_INFO_VERSION: ${{ needs.get-package-info.outputs.version }}
           INPUTS_NEW_CHANNEL: ${{ inputs.new-channel }}