chore(ci): disable npm provenance on self-hosted runner

[jbiskur]

Summary

• restore explicit --provenance=false on npm publish
• required because this workflow runs on Blacksmith/self-hosted runners

Root Cause

npm publish --access public now auto-signed provenance in this workflow because id-token: write is available. npm rejected the publish with:

Unsupported GitHub Actions runner environment: "self-hosted". Only "github-hosted" runners are supported when publishing with provenance.

Validation

• bun install --frozen-lockfile
• bun run lint
• bun run typecheck
• bun test — 204 passing
• bun run build
• bunx npm@latest pack --dry-run — @flowcore/sdk@4.2.3

[coderabbitai]

Warning

Review limit reached

@jbiskur, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 45 minutes and 7 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more credits in the billing tab to continue.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 1735d86f-3379-4f0d-a991-151afaa346e9

📥 Commits

Reviewing files that changed from the base of the PR and between 336a94d and 7529537.

📒 Files selected for processing (1)

• .github/workflows/build.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/fix-npm-publish-provenance

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}