Rotate NPM_TOKEN — expires 2026-08-26 (5 days left)

[github-actions]

The repo secret NPM_TOKEN (used by .github/workflows/pack.yml to publish @bitmovin/cli on tag push) expires on 2026-08-26 — 5 days from now.

Rotate

1. On npmjs.com → Access Tokens → Generate New Token → Granular Access Token:
   • Packages and scopes: @bitmovin/cli (read + write)
   • Bypass two-factor authentication: ON
   • Expiration: 90 days
2. Store it as the repo secret:

   printf '%s' '<new-token>' | gh secret set NPM_TOKEN --repo bitmovin/cli
   

3. Bump the expiry date in .github/npm-token-expiry.txt and commit on main.
4. Revoke the previous token on npmjs.com.
5. Close this issue.

This issue is created and refreshed daily by .github/workflows/check-npm-token.yml while days_left <= 14.