[BUG] error 422 when using trusted publishing

[typed-sigterm]

Is there an existing issue for this?

• [x] I have searched the existing issues

This issue exists in the latest npm version

• [x] I am using the latest npm

Current Behavior

npm error 422 Unprocessable Entity - PUT https://registry.npmjs.org/@typed-sigterm%2feslint-config - Error verifying sigstore provenance bundle: Missing SourceRepositoryRef in signing certificate

https://github.com/typed-sigterm/eslint-config/actions/runs/18527767924/job/53655668439

Expected Behavior

Expect it to successfully publish a new version.

Steps To Reproduce

Use this Action: https://github.com/typed-sigterm/eslint-config/actions/runs/18527767924/workflow

Environment

No response

[nikunj-kohli]

I would like to contribute here, I request you to assign me

[typed-sigterm]

Only uses with write access to the repo can assign issues

[peterpeterparker]

We faced the same issue: https://github.com/dfinity/eslint-config-oisy-wallet/actions/runs/19458066920/job/55677268836

As my colleague discovered, it was related to the actions/checkout issue: https://github.com/actions/checkout/issues/2280

Downgrading the action "resolved" the issue.