From b00cae7699a3a90f2643877fa0031c0693370530 Mon Sep 17 00:00:00 2001
From: Tom Boucher <trekkie@nomorestars.com>
Date: Sun, 24 May 2026 00:55:16 -0400
Subject: [PATCH] fix(ci): reference NPM publish secret as
 GETSHITDONEREDUXNPMTOKEN (#205) (#206)

release-finalize, hotfix, and release-sdk workflows referenced
\`secrets.NPM_TOKEN\`, but the actual environment secret is named
\`GETSHITDONEREDUXNPMTOKEN\`. Resolves the ENEEDAUTH failure on
run 26351934927.

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
---
 .github/workflows/hotfix.yml      |  6 +++---
 .github/workflows/release-sdk.yml |  6 +++---
 .github/workflows/release.yml     | 14 +++++++-------
 3 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/hotfix.yml b/.github/workflows/hotfix.yml
index 4228aec7c..1d093faa8 100644
--- a/.github/workflows/hotfix.yml
+++ b/.github/workflows/hotfix.yml
@@ -376,7 +376,7 @@ jobs:
 
       - name: Dry-run publish validation
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
         run: npm publish --dry-run --tag latest
 
       - name: Tag and push
@@ -400,14 +400,14 @@ jobs:
       - name: Publish to npm (latest)
         if: ${{ !inputs.dry_run && steps.prior_publish.outputs.skip_publish != 'true' }}
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
         run: npm publish --provenance --access public --tag latest
 
       - name: Re-point next dist-tag at this hotfix
         if: ${{ !inputs.dry_run }}
         env:
           VERSION: ${{ inputs.version }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
         run: |
           npm dist-tag add "get-shit-done-redux@${VERSION}" next
           echo "✅ next dist-tag re-pointed to v${VERSION} (matches latest)"
diff --git a/.github/workflows/release-sdk.yml b/.github/workflows/release-sdk.yml
index 2dab33662..36f90a825 100644
--- a/.github/workflows/release-sdk.yml
+++ b/.github/workflows/release-sdk.yml
@@ -632,7 +632,7 @@ jobs:
         if: ${{ steps.prior_publish.outputs.skip_publish != 'true' }}
         env:
           TAG: ${{ steps.ver.outputs.tag }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
         run: npm publish --dry-run --tag "$TAG"
 
       - name: Tag and push
@@ -651,7 +651,7 @@ jobs:
         if: ${{ !inputs.dry_run && steps.prior_publish.outputs.skip_publish != 'true' }}
         env:
           TAG: ${{ steps.ver.outputs.tag }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
         run: npm publish --provenance --access public --tag "$TAG"
 
       # Keep `next` from going stale relative to `latest`. When publishing a
@@ -662,7 +662,7 @@ jobs:
         if: ${{ !inputs.dry_run && steps.ver.outputs.tag == 'latest' }}
         env:
           VERSION: ${{ steps.ver.outputs.version }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
         run: |
           npm dist-tag add "@opengsd/get-shit-done-redux@${VERSION}" next
           echo "✅ next dist-tag re-pointed to v${VERSION} (matches latest)"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e98d4e598..eb9022e34 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -202,7 +202,7 @@ jobs:
           npm publish --dry-run --tag next
           cd sdk && npm publish --dry-run --tag next
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
 
       - name: Tag and push
         if: ${{ !inputs.dry_run }}
@@ -227,13 +227,13 @@ jobs:
         if: ${{ !inputs.dry_run }}
         run: npm publish --provenance --access public --tag next
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
 
       - name: Publish SDK to npm (next)
         if: ${{ !inputs.dry_run }}
         run: cd sdk && npm publish --provenance --access public --tag next
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
 
       - name: Create GitHub pre-release
         if: ${{ !inputs.dry_run }}
@@ -350,7 +350,7 @@ jobs:
           npm publish --dry-run
           cd sdk && npm publish --dry-run
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
 
       - name: Create PR to merge release back to main
         if: ${{ !inputs.dry_run }}
@@ -405,13 +405,13 @@ jobs:
         if: ${{ !inputs.dry_run }}
         run: npm publish --provenance --access public
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
 
       - name: Publish SDK to npm (latest)
         if: ${{ !inputs.dry_run }}
         run: cd sdk && npm publish --provenance --access public
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
 
       - name: Create GitHub Release
         if: ${{ !inputs.dry_run }}
@@ -428,7 +428,7 @@ jobs:
         if: ${{ !inputs.dry_run }}
         env:
           VERSION: ${{ inputs.version }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GETSHITDONEREDUXNPMTOKEN }}
         run: |
           # Point next to the stable release so @next never returns something
           # older than @latest. This prevents stale pre-release installs.