From 6890159793af15ffa4b8b3eb0b02cd993ed951b6 Mon Sep 17 00:00:00 2001
From: Shike Chen <shikechen@microsoft.com>
Date: Mon, 15 Jun 2026 18:38:03 -0700
Subject: [PATCH] fix

---
 .github/workflows/publish-pwsh-module.yml | 46 -----------------------
 1 file changed, 46 deletions(-)

diff --git a/.github/workflows/publish-pwsh-module.yml b/.github/workflows/publish-pwsh-module.yml
index c1f422b..f1f446b 100644
--- a/.github/workflows/publish-pwsh-module.yml
+++ b/.github/workflows/publish-pwsh-module.yml
@@ -980,52 +980,6 @@ jobs:
             --api-key "$GH_TOKEN" \
             --skip-duplicate
 
-      # Confirm the just-pushed pair is RESOLVABLE from a fresh consumer
-      # against nuget.org with an empty packages cache. Defends against
-      # the round-2 review's "delayed indexing" failure mode where a
-      # release ships but transient nuget.org indexing makes the new
-      # JwksFetcher unable to find its just-pushed Core dependency.
-      - name: Lock-step release verification (fresh consumer restore)
-        if: ${{ !inputs.dry_run }}
-        shell: bash
-        run: |
-          set -euo pipefail
-          version='${{ needs.prep.outputs.version }}'
-          work=$(mktemp -d)
-          cache=$(mktemp -d)
-          pushd "$work" >/dev/null
-          dotnet new console --output . --framework net8.0 --no-restore >/dev/null
-          cat > nuget.config <<EOF
-          <?xml version="1.0" encoding="utf-8"?>
-          <configuration>
-            <packageSources>
-              <clear />
-              <add key="nuget" value="https://api.nuget.org/v3/index.json" />
-            </packageSources>
-          </configuration>
-          EOF
-          dotnet add package JwtDecoder.JwksFetcher --version "$version"
-          # Up to a minute of nuget.org indexing slack; retry a few times.
-          for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20; do
-            if dotnet restore --packages "$cache" --verbosity quiet; then
-              echo "OK: JwtDecoder.JwksFetcher $version + transitive Core resolve from nuget.org on attempt $i."
-              popd >/dev/null
-              rm -rf "$work" "$cache"
-              exit 0
-            fi
-            echo "Attempt $i failed; sleeping 15s..."
-            sleep 60
-          done
-          echo "::error::Lock-step release verification failed: JwtDecoder.JwksFetcher $version does not resolve from nuget.org after 5 attempts."
-          exit 1
-
-      - name: Dry-run summary
-        if: ${{ inputs.dry_run }}
-        shell: bash
-        run: |
-          echo "DRY RUN: would push these packages to nuget.org and GitHub Packages:"
-          ls -la ./nupkgs/
-
   # ---------------------------------------------------------------------
   # Job 6: cut the GitHub Release at the tag with every CLI binary
   # attached. Skipped entirely on dry runs. Idempotent: if the release