ci: clarify TODO for trusted publishing environments

Author: eitsupi

.github/workflows/marketplace-pre-release.yml

@@ -40,7 +40,7 @@ jobs:
       prerelease-date: ${{ needs.prepare.outputs.date }}
 
   publish-vs-marketplace:
-    # TODO: Uncomment after a repository admin creates the vs-marketplace environment (for trusted publishing) and moves VSCE_TOKEN into it.
+    # TODO: Uncomment when switching to trusted publishing (OIDC, no token); a repository admin must create the vs-marketplace environment first.
     # environment: vs-marketplace
     needs:
       - prepare
@@ -73,7 +73,7 @@ jobs:
         run: pnpm exec vsce publish --pre-release --skip-duplicate --packagePath artifacts/vscode-R.vsix
 
   publish-open-vsx:
-    # TODO: Uncomment after a repository admin creates the open-vsx environment (for trusted publishing) and moves OPEN_VSX_TOKEN into it.
+    # TODO: Uncomment when switching to trusted publishing (OIDC, no token); a repository admin must create the open-vsx environment first.
     # environment: open-vsx
     needs:
       - prepare

.github/workflows/release.yml

@@ -61,7 +61,7 @@ jobs:
 
   publish-vs-marketplace:
     name: Publish to Visual Studio Marketplace
-    # TODO: Uncomment after a repository admin creates the vs-marketplace environment (for trusted publishing) and moves VSCE_TOKEN into it.
+    # TODO: Uncomment when switching to trusted publishing (OIDC, no token); a repository admin must create the vs-marketplace environment first.
     # environment: vs-marketplace
     timeout-minutes: 30
     runs-on: ubuntu-latest
@@ -86,7 +86,7 @@ jobs:
 
   publish-open-vsx:
     name: Publish to Open VSX Registry
-    # TODO: Uncomment after a repository admin creates the open-vsx environment (for trusted publishing) and moves OPEN_VSX_TOKEN into it.
+    # TODO: Uncomment when switching to trusted publishing (OIDC, no token); a repository admin must create the open-vsx environment first.
     # environment: open-vsx
     timeout-minutes: 30
     runs-on: ubuntu-latest