fix: correct pnpm installation order in release workflows

- Install pnpm before setting up Node.js cache
- Skip npm publishing for now (no NPM_TOKEN configured)
- Fixes workflow failures on tag pushes

Author: stephenway

.github/workflows/marketplace-release.yml

@@ -26,18 +26,18 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          version: 8
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '24'
           registry-url: 'https://registry.npmjs.org'
           cache: 'pnpm'
 
-      - name: Install pnpm
-        uses: pnpm/action-setup@v2
-        with:
-          version: 8
-
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
@@ -51,6 +51,7 @@ jobs:
         run: pnpm run build:action
 
       - name: Publish to npm
+        if: false # Skip npm publishing for now
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/release.yml

@@ -18,18 +18,18 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          version: 8
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '24'
           registry-url: 'https://registry.npmjs.org'
           cache: 'pnpm'
 
-      - name: Install pnpm
-        uses: pnpm/action-setup@v2
-        with:
-          version: 8
-
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
@@ -40,6 +40,7 @@ jobs:
         run: pnpm run build
 
       - name: Publish to npm
+        if: false # Skip npm publishing for now
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}