[MAINT]: NPM releases failing due to OTP token (2FA) requirements

[wolfy1339]

Moving the discussion from octokit/openapi#483 (comment)

The release workflow is failing because the token suddenly needs a one-time passcode (2FA).

https://github.com/octokit/openapi/actions/runs/13790432706/job/38568599440

npm error code EOTP
npm error This operation requires a one-time password from your authenticator.
npm error You can provide a one-time password by passing --otp=<code> to the command you ran.
npm error If you already provided a one-time password then it is likely that you either typoed
npm error it, or it timed out. Please try again.
npm error A complete log of this run can be found in: /home/runner/.npm/_logs/2025-03-11T14_28_01_144Z-debug-0.log

[gr2m]

I'll have a look today, I think that should be a straightforward fix

[gr2m]

Ah I'm sorry I mixed up OTP with provenance attestation 🤦🏼 it was pre-coffee ☕

So it seems that the @octokit org on npm now enforces one-time passwords for publishing, which breaks our automated release workflow. I don't know when that happened or why. I'll try to find out but @nickfloyd might know more