updated release workflow

Author: angular-bootstrap

.github/workflows/release.yml

@@ -6,6 +6,8 @@ on:
 jobs:
   build-test-release:
     runs-on: ubuntu-latest
+    env:
+      NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}    # make token available to all steps
     permissions:
       contents: read
       id-token: write # CRITICAL: This enables OIDC authentication
@@ -37,6 +39,12 @@ jobs:
       - name: Build library
         run: npm run build
 
+      - name: Configure npm auth (for verification steps)
+        run: |
+          # write auth token into the runner userconfig so npm CLI will use it
+          # we avoid printing the token; GitHub masks secrets automatically
+          npm config set //registry.npmjs.org/:_authToken "${NODE_AUTH_TOKEN}" --userconfig /home/runner/work/_temp/.npmrc || true
+
       - name: Verify npm auth + dry run
         run: |
           echo "whoami:"
@@ -48,6 +56,4 @@ jobs:
 
       - name: Publish to npm
         working-directory: dist/ngbootstrap
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npm publish --provenance --access public