diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 4521e99..55adba0 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,15 +19,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - name: Cache Yarn cache
-        uses: actions/cache@v5
-        env:
-          cache-name: yarn-cache
-        with:
-          path: ~/.yarn/berry/cache
-          key: ${{ runner.os }}-${{ env.cache-name }}-${{ hashFiles('**/yarn.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-${{ env.cache-name }}
+      # ⚠️ Do not cache dependencies in publish workflows
+      # Restoring package-manager cache here increases the risk of a compromised release
 
       - name: Use Node.js
         uses: actions/setup-node@v6